Skip to content
fr Sign in
2.1 Low

CVE-2026-119133 Wasmtime 47.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a memory misalignment flaw in VMContext layout that…

Description

Wasmtime 47.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a memory misalignment flaw in VMContext layout that causes undefined behavior when modules contain an odd number of exception tags. A WebAssembly module with an odd tag count misaligns subsequent host fields in embedders with exceptions enabled, although no exploitation path is currently known.

Affected products and versions

Product Affected versions Fixed in
wasmtime 49.0 49.0.0 → < 49.0.3 49.0.3
wasmtime 48.0 earliest → < 48.0.6 48.0.6
wasmtime 47.0 47.0.0 → < 48.0.6 48.0.6

References

Timeline

  1. Published
  2. Last modified

Other CVEs of wasmtime

The 81 CVEs of wasmtime →
CVE-2026-121440 Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 fails to check forwarded trailers against the… 6.3 Medium CVE-2026-121441 Wasmtime before 36.0.19, 37.0.0 before 48.0.7, and 49.0.0 before 49.0.4 contains a request smuggling vulnerability in… 6.3 Medium CVE-2026-121439 Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 contains a response splitting vulnerability in wasi-http p3… 6.9 Medium CVE-2026-119142 Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability where dropping the… 5.9 Medium
Track this CVE