-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| wasmtime | rust | >= 2.0.0, < 2.0.2 | 2.0.2 |
| wasmtime | rust | < 1.0.2 | 1.0.2 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from the type mismatch in the wasmtime_trap_code function between its C API declaration (expecting a 1-byte buffer) and Rust implementation (writing a 4-byte i32). The commit diff shows the parameter type was changed from &mut i32 to &mut u8 in trap.rs, confirming the root cause. All advisories and CVE descriptions explicitly reference this function as the vulnerable component. The out-of-bounds write occurs when the 4-byte write operation exceeds the caller's 1-byte buffer allocation.