Skip to content

CVE record · 1 source

CVE-2026-119136

CVSS 4.8

Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains insufficient checks in Store when mixing async-style and sync-style WebAssembly calls.

Vendor: Bytecodealliance
Product: wasmtime
CVSS v3.1: 4.8 AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H
Weakness: CWE-1265

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

3

CVE NVD 7d ago

Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains insufficient checks in Store when mixing async-style and sync-style WebAssembly calls.

Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains insufficient checks in Store when mixing async-style and sync-style WebAssembly calls. Embedders re-entering WebAssembly via sync APIs from host functions called…

CVSS 4.8 CVE-2026-119136 Bytecodealliance