Skip to content

Vulnerabilities of bytecodealliance wasmtime

Is your version affected?

CVE Summary Score Published
CVE-2026-115390 Wasmtime 47.0.0 before 48.0.3 and 49.0.0 before 49.0.1 contains a fuel accounting flaw in Cranelift-compiled call_ref… 6.9 Medium Oct 22, 2026
CVE-2026-115388 wasmtime-wasi-http in Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 does not enforce the… 6.9 Medium Oct 22, 2026
CVE-2026-115387 Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 Host Panic via WASI Filesystem Timestamp Overflow 6.9 Medium Oct 22, 2026
CVE-2026-115385 Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial of service vulnerability in the wasmtime-wasi… 6.9 Medium Oct 22, 2026
CVE-2026-115386 Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains an information disclosure vulnerability… 2.1 Low Oct 22, 2026
CVE-2026-115384 Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a stack buffer overflow vulnerability that allows… 9.4 Critical Oct 22, 2026
CVE-2026-115383 Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via Tag Imports 5.9 Medium Oct 22, 2026
CVE-2026-115381 Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains an unbounded memory allocation in the… 5.9 Medium Oct 22, 2026
CVE-2026-115382 Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial-of-service vulnerability in its wasi:http… 5.9 Medium Oct 22, 2026
CVE-2026-115380 Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains a denial of service vulnerability in… 5.1 Medium Oct 22, 2026
CVE-2026-115379 Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via try_call 6.9 Medium Oct 22, 2026
CVE-2026-104855 Wasmtime is a runtime for WebAssembly 2.0 Low Oct 2, 2026
CVE-2026-58494 Wasmtime is a runtime for WebAssembly 6.5 Medium Jul 8, 2026
CVE-2026-54786 Wasmtime is a runtime for WebAssembly 2.3 Low Jul 1, 2026
CVE-2026-47261 Wasmtime is a runtime for WebAssembly 7.5 High Jun 15, 2026
CVE-2026-44216 Wasmtime is a runtime for WebAssembly 5.9 Medium May 14, 2026
CVE-2026-35195 Wasmtime is a runtime for WebAssembly 6.1 Medium Apr 9, 2026
CVE-2026-35186 Wasmtime is a runtime for WebAssembly 6.1 Medium Apr 9, 2026
CVE-2026-34988 Wasmtime is a runtime for WebAssembly 2.3 Low Apr 9, 2026
CVE-2026-34987 Wasmtime is a runtime for WebAssembly 9.0 Critical Apr 9, 2026
CVE-2026-34983 Wasmtime is a runtime for WebAssembly 1.0 Low Apr 9, 2026
CVE-2026-34971 Wasmtime is a runtime for WebAssembly 9.0 Critical Apr 9, 2026
CVE-2026-34946 Wasmtime is a runtime for WebAssembly 5.9 Medium Apr 9, 2026
CVE-2026-34945 Wasmtime is a runtime for WebAssembly 2.3 Low Apr 9, 2026
CVE-2026-34944 Wasmtime is a runtime for WebAssembly 4.1 Medium Apr 9, 2026

Other bytecodealliance products