{
  "cveId": "CVE-2023-30624",
  "url": "https://patchblox.com/security/cve/CVE-2023-30624",
  "summary": "CVE-2023-30624 is fixed in ecs-service-connect-agent on 1 platform by ALAS2023-2023-344 (version v1.27.0.0-1.amzn2023), released September 14, 2023. It is not reported as exploited. Patch Radar priority: High.",
  "title": "ecs-service-connect-agent: Wasmtime is a standalone runtime for WebAssembly",
  "description": "Wasmtime is a standalone runtime for WebAssembly. Prior to versions 6.0.2, 7.0.1, and 8.0.1, Wasmtime\u0027s implementation of managing per-instance state, such as tables and memories, contains LLVM-level undefined behavior. This undefined behavior was found to cause runtime-level issues when compiled with LLVM 16 which causes some writes, which are critical for correctness, to be optimized away. Vulnerable versions of Wasmtime compiled with Rust 1.70, which is currently in beta, or later are known to have incorrectly compiled functions. Versions of Wasmtime compiled with the current Rust stable release, 1.69, and prior are not known at this time to have any issues, but can theoretically exhibit potential issues.",
  "published": "2023-09-14T00:54:00Z",
  "severity": "important",
  "epss": 0.0045,
  "epssPercentile": 0.39505,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "ecs-service-connect-agent",
      "release": "amzn 2023",
      "fixedVersion": "v1.27.0.0-1.amzn2023",
      "fix": "ALAS2023-2023-344",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-344",
      "released": "2023-09-14T00:54:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-11T13:47:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}