5.9
Moyenne
CVE-2026-119132 Wasmtime from 49.0.0 before 49.0.3 contains a denial-of-service vulnerability that allows a WebAssembly guest to trigger…
Description
Wasmtime from 49.0.0 before 49.0.3 contains a denial-of-service vulnerability that allows a WebAssembly guest to trigger a host panic by transcoding overlapping strings in fused adapters. Attackers can make a same-instance component-to-component call transferring a string whose source and destination alias each other, crashing the host instead of raising a trap.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| wasmtime 49.0 | 49.0.0 → < 49.0.3 | 49.0.3 |
Références
Chronologie
- Publiée
- Dernière modification
Autres CVE de wasmtime
Les 81 CVE de wasmtime →
CVE-2026-121440
Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 fails to check forwarded trailers against the…
6.3
Moyenne
CVE-2026-121441
Wasmtime before 36.0.19, 37.0.0 before 48.0.7, and 49.0.0 before 49.0.4 contains a request smuggling vulnerability in…
6.3
Moyenne
CVE-2026-121439
Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 contains a response splitting vulnerability in wasi-http p3…
6.9
Moyenne
CVE-2026-119142
Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability where dropping the…
5.9
Moyenne