Two Critical Wasmtime Flaws Could Let Malicious Web Assembly Modules Escape Sandboxes
Wasmtime's maintainers at the Bytecode Alliance rated two Cranelift compiler flaws 9.9 out of 10 on CVSS in advisories published October 19, both allowing a malicious WebAssembly module to escape the sandbox meant to contain it; one flaw affects only ARM64...