bytecodealliance wasmtime
78 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-119143 | 46.0.0 – < 48.0.6 ; 49.0.0 – < 49.0.3 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic via Zero-Length Stream Writes | MEDIUM 5.9 | 0.2 % | ||
| CVE-2026-119142 | 46.0.0 – < 48.0.6 ; 49.0.0 – < 49.0.3 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via call_async Drop | MEDIUM 5.9 | 0.3 % | ||
| CVE-2026-119141 | 46.0.0 – < 48.0.6 ; 49.0.0 – < 49.0.3 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via realloc | MEDIUM 6.9 | 0.4 % | ||
| CVE-2026-119140 | 46.0.0 – < 48.0.6 ; 49.0.0 – < 49.0.3 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via thread.yield | MEDIUM 5.9 | 0.2 % | ||
| CVE-2026-119139 | 46.0.0 – < 48.0.6 ; 49.0.0 – < 49.0.3 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via Func::call | MEDIUM 5.9 | 0.2 % | ||
| CVE-2026-119138 | 46.0.0 – < 48.0.6 ; 49.0.0 – < 49.0.3 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic After Trap | MEDIUM 5.9 | 0.3 % | ||
| CVE-2026-119137 | 42.0.0 – < 48.0.6 ; 49.0.0 – < 49.0.3 | Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Stack Overflow via Type Registry | MEDIUM 6.9 | 0.4 % | ||
| CVE-2026-119136 | 42.0.0 – < 48.0.6 ; 49.0.0 – < 49.0.3 | Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Async-Entrypoint Enforcement Bypass | MEDIUM 5.9 | 0.2 % | ||
| CVE-2026-119135 | 46.0.0 – < 48.0.6 ; 49.0.0 – < 49.0.3 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic via StreamReader Type Mismatch | MEDIUM 5.9 | 0.2 % | ||
| CVE-2026-119134 | < 36.0.18 ; 37.0.0 – < 48.0.6 ; 49.0.0 – < 49.0.3 | Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 Unbounded Memory Growth via Component-Model Resource Handles | MEDIUM 6.9 | 0.2 % | ||
| CVE-2026-119133 | 47.0.0 – < 48.0.6 ; 49.0.0 – < 49.0.3 | Wasmtime 47.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Misaligned VMContext via Exception Tags | LOW 2.1 | 0.2 % | ||
| CVE-2026-119132 | 49.0.0 – < 49.0.3 | Wasmtime 49.0.0 before 49.0.3 Host Panic via Overlapping String Transcode in Fused Adapter | MEDIUM 5.9 | 0.2 % | ||
| CVE-2026-119131 | 46.0.0 – < 48.0.6 ; 49.0.0 – < 49.0.3 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via wasi-http | MEDIUM 6.9 | 0.3 % | ||
| CVE-2026-119130 | < 36.0.18 ; 37.0.0 – < 48.0.6 ; 49.0.0 – < 49.0.3 | Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 HTTP Request Target Smuggling | LOW 2.1 | 0.2 % | ||
| CVE-2026-118688 | < 36.0.18 ; 37.0.0 – < 48.0.6 ; 49.0.0 – < 49.0.3 | Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 Sandbox Escape via Symlink Rename | HIGH 8.8 | 0.2 % | ||
| CVE-2026-115893 | < 36.0.19 ; >= 37.0.0, < 48.0.7 ; >= 49.0.0, < 49.0.4 | Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction | CRITICAL 9.9 | 1.0 % | ||
| CVE-2026-115892 | >= 46.0.0, < 48.0.7 ; >= 49.0.0, < 49.0.4 | Wasmtime: Panic lowering a host-created component model stream into a guest that expects a different payload type | MEDIUM 5.7 | 0.4 % | ||
| CVE-2026-115889 | < 36.0.19 ; >= 37.0.0, < 43.0.0 | Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation | CRITICAL 9.9 | 0.5 % | ||
| CVE-2026-115393 | < 24.0.12 ; 25.0.0 – < 36.0.13 ; 37.0.0 – < 46.0.2 ; … | Wasmtime before 24.0.12, 25.0.0 before 36.0.13, 37.0.0 before 46.0.2, and 47.0.0 before 47.0.3 Cross-Engine Type Confusion | LOW 1.0 | 0.1 % | ||
| CVE-2026-115392 | < 24.0.13 ; 25.0.0 – < 36.0.14 ; 37.0.0 – < 46.0.3 ; … | Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 Sandbox Escape via Trailing Slashes | HIGH 8.8 | 0.2 % | ||
| CVE-2026-115391 | 46.0.0 – < 46.0.3 ; 47.0.0 – < 47.0.4 | Wasmtime 46.0.0 before 46.0.3 and 47.0.0 before 47.0.4 Unbounded Heap Allocation via WASIp3 Streams | MEDIUM 6.9 | 0.2 % | ||
| CVE-2026-115390 | 47.0.0 – < 48.0.3 ; 49.0.0 – < 49.0.1 | Wasmtime 47.0.0 before 48.0.3 and 49.0.0 before 49.0.1 Fuel Accounting Bypass DoS | MEDIUM 6.9 | 0.2 % | ||
| CVE-2026-115389 | < 36.0.16 ; 37.0.0 – < 48.0.3 ; 49.0.0 – < 49.0.1 | Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 Denial of Service via Val API | LOW 1.0 | 0.2 % | ||
| CVE-2026-115388 | < 36.0.16 ; 37.0.0 – < 48.0.3 ; 49.0.0 – < 49.0.1 | Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 Memory Exhaustion DoS via wasmtime-wasi-http Outgoing Body Write | MEDIUM 6.9 | 0.1 % | ||
| CVE-2026-115387 | < 36.0.16 ; 37.0.0 – < 48.0.3 ; 49.0.0 – < 49.0.1 | Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 Host Panic via WASI Filesystem Timestamp Overflow | MEDIUM 6.9 | 0.1 % | ||
| CVE-2026-115386 | < 36.0.17 ; 37.0.0 – < 48.0.4 ; 49.0.0 – < 49.0.2 | Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Memory Disclosure via fd_readdir | LOW 2.1 | 0.2 % | ||
| CVE-2026-115385 | 46.0.0 – < 48.0.4 ; 49.0.0 – < 49.0.2 | Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Host Panic via WASIp3 Timestamps | MEDIUM 6.9 | 0.1 % | ||
| CVE-2026-115384 | 39.0.0 – < 48.0.4 ; 49.0.0 – < 49.0.2 | Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Stack Buffer Overflow | CRITICAL 9.4 | 0.3 % | ||
| CVE-2026-115383 | 47.0.0 – < 48.0.4 ; 49.0.0 – < 49.0.2 | Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via Tag Imports | MEDIUM 5.9 | 0.2 % | ||
| CVE-2026-115382 | 46.0.0 – < 48.0.4 ; 49.0.0 – < 49.0.2 | Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 wasi:http Zero Timeout Panic DoS | MEDIUM 5.9 | 0.3 % | ||
| CVE-2026-115381 | < 36.0.17 ; 37.0.0 – < 48.0.4 ; 49.0.0 – < 49.0.2 | Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Unbounded Host Memory Allocation via SinkOutputStream write-zeroes | MEDIUM 5.9 | 0.2 % | ||
| CVE-2026-115380 | < 36.0.17 ; 37.0.0 – < 48.0.4 ; 49.0.0 – < 49.0.2 | Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Fuel Limit Bypass DoS via WASI Preview 0 poll_oneoff | MEDIUM 5.1 | 0.1 % | ||
| CVE-2026-115379 | 47.0.0 – < 48.0.4 ; 49.0.0 – < 49.0.2 | Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via try_call | MEDIUM 6.9 | 0.3 % | ||
| CVE-2026-104855 | >= 46.0.0, < 46.0.2 ; >= 47.0.0, < 47.0.3 | Wasmtime: Preemption and traps during bulk operations enable breaking internal VM state | LOW 2.0 | 0.3 % | ||
| CVE-2026-58494 | < 24.0.11 ; >= 25.0.0, < 36.0.12 ; >= 37.0.0, < 45.0.3 ; … | Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-54786 | < 24.0.10 ; >= 25.0.0, < 36.0.11 ; >= 37.0.0, < 44.0.3 ; … | Wasmtime: Leak in WASIp1 `fd_renumber` implementation | LOW 2.3 | 0.4 % | ||
| CVE-2026-47261 | >= 37.0.0, < 44.0.2 ; >= 25.0.0, < 36.0.10 ; < 24.0.9 | Wasmtime: WASI path_open(TRUNCATE) bypasses `FilePerms::WRITE` host restriction | HIGH 7.5 | 0.4 % | ||
| CVE-2026-44216 | >= 30.0.0, < 36.0.8 ; >= 37.0.0, < 43.0.2 ; 44.0.0 | Wasmtime: Panic when allocating a table exceeding the size of the host's address space | MEDIUM 5.9 | 0.3 % | ||
| CVE-2026-35195 | < 24.0.7 ; >= 25.0.0, < 36.0.7 ; >= 37.0.0, < 42.0.2 ; … | Wasmtime has an out-of-bounds write or crash when transcoding component model strings | MEDIUM 6.1 | 0.2 % | ||
| CVE-2026-35186 | >= 25.0.0, < 36.0.7 ; >= 37.0.0, < 42.0.2 ; >= 43.0.0, < 44.0.1 | Wasmtime has an improperly masked return value from `table.grow` with Winch compiler backend | MEDIUM 6.1 | 0.2 % | ||
| CVE-2026-34988 | >= 28.0.0, < 36.0.7 ; >= 37.0.0, < 42.0.2 ; >= 43.0.0, < 44.0.1 | Wasmtime leaks data between pooling allocator instances | LOW 2.3 | 0.3 % | ||
| CVE-2026-34987 | >= 25.0.0, < 36.0.7 ; >= 37.0.0, < 42.0.2 ; >= 43.0.0, < 44.0.1 | Wasmtime with Winch compiler backend on aarch64 may allow a sandbox-escaping memory access | CRITICAL 9.0 | 0.3 % | ||
| CVE-2026-34983 | >= 43.0.0, < 43.0.1 | Wasmtime has a use-after-free bug after cloning `wasmtime::Linker` | LOW 1.0 | 0.1 % | ||
| CVE-2026-34971 | >= 32.0.0, < 36.0.7 ; >= 37.0.0, < 42.0.2 ; >= 43.0.0, < 44.0.1 | Wasmtime miscompiled guest heap access enables sandbox escape on aarch64 Cranelift | CRITICAL 9.0 | 0.3 % | ||
| CVE-2026-34946 | >= 25.0.0, < 36.0.7 ; >= 37.0.0, < 42.0.2 ; >= 43.0.0, < 44.0.1 | Wasmtime's host panics when Winch compiler executes `table.fill` | MEDIUM 5.9 | 0.4 % | ||
| CVE-2026-34945 | >= 25.0.0, < 36.0.7 ; >= 37.0.0, < 42.0.2 ; >= 43.0.0, < 44.0.1 | Wasmtime leaks host data with 64-bit tables and Winch | LOW 2.3 | 0.3 % | ||
| CVE-2026-34944 | < 24.0.7 ; >= 25.0.0, < 36.0.7 ; >= 37.0.0, < 42.0.2 ; … | Wasmtime segfault or unused out-of-sandbox load with `f64x2.splat` operator on x86-64 | MEDIUM 4.1 | 0.2 % | ||
| CVE-2026-34943 | < 24.0.7 ; >= 25.0.0, < 36.0.7 ; >= 37.0.0, < 42.0.2 ; … | Wasmtime panics when lifting `flags` component value | MEDIUM 5.6 | 0.3 % | ||
| CVE-2026-34942 | < 24.0.7 ; >= 25.0.0, < 36.0.7 ; >= 37.0.0, < 42.0.2 ; … | Wasmtime panics when transcoding misaligned utf-16 strings | MEDIUM 5.9 | 0.4 % | ||
| CVE-2026-34941 | < 24.0.7 ; >= 25.0.0, < 36.0.7 ; >= 37.0.0, < 42.0.2 ; … | Wasmtime has a Heap OOB read in component model UTF-16 to latin1+utf16 string transcoding | MEDIUM 6.9 | 0.4 % | ||
| CVE-2026-27572 | < 24.0.6 ; >= 25.0.0, < 36.0.6 ; >= 37.0.0, < 40.0.4 ; … | Wasmtime can panic when adding excessive fields to a `wasi:http/types.fields` instance | MEDIUM 6.9 | 0.5 % | ||
| CVE-2026-27204 | < 24.0.6 ; >= 25.0.0, < 36.0.6 ; >= 37.0.0, < 40.0.4 ; … | Wasmtime WASI implementations are vulnerable to guest-controlled resource exhaustion | MEDIUM 6.9 | 0.4 % | ||
| CVE-2026-27195 | >= 39.0.0, < 40.0.4 ; >= 41.0.0, < 41.0.4 | Wasmtime is vulnerable to panic when dropping a `[Typed]Func::call_async` future | MEDIUM 6.9 | 0.4 % | ||
| CVE-2026-24116 | >= 29.0.0, < 36.0.5 ; >= 37.0.0, < 40.0.3 ; = 41.0.0 | Wasmtime segfault or unused out-of-sandbox load with f64.copysign operator on x86-64 | MEDIUM 4.1 | 0.2 % | ||
| CVE-2025-64345 | >= 38.0.1, < 38.0.4 ; >= 37.0.0, < 37.0.3 ; >= 26.0.0, < 36.0.3 ; … | Wasmtime provides unsound API access to a WebAssembly shared linear memory | LOW 1.8 | 0.1 % | ||
| CVE-2025-62711 | >= 38.0.0, < 38.0.3 | Wasmtime vulnerable to segfault when using component resources | LOW 2.1 | 0.4 % | ||
| CVE-2025-61670 | >= 37.0.0, < 37.0.2 | Wasmtime has memory leak in C API with `externref` and `anyref` types | LOW 1.0 | 0.2 % | ||
| CVE-2025-53901 | < 24.0.4 ; >= 33.0.0, < 33.0.2 ; >= 34.0.0, < 34.0.2 | Wasmtime has host panic with `fd_renumber` WASIp1 function | LOW 3.5 | 0.4 % | ||
| CVE-2024-51745 | < 24.0.2 ; >= 25.0.0, < 25.0.3 ; = 26.0.0 | Wasmtime doesn't fully sandbox all the Windows device filenames | LOW 2.3 | 0.8 % | ||
| CVE-2024-47813 | >= 19.0.0, < 21.0.2 ; >= 22.0.0, < 22.0.1 ; >= 23.0.0, < 23.0.3 ; … | Wasmtime race condition could lead to WebAssembly control-flow integrity and type safety violations | LOW 2.9 | 0.2 % | ||
| CVE-2024-47763 | >= 21.0.0, < 21.0.2 ; >= 22.0.0, < 22.0.1 ; >= 23.0.0, < 23.0.3 ; … | Wasmtime runtime crash when combining tail calls with trapping imports | MEDIUM 5.5 | 0.2 % | ||
| CVE-2024-30266 | = 19.0.0 | Wasmtime vulnerable to panic when using a dropped extenref-typed element segment | MEDIUM 5.5 | 0.3 % | ||
| CVE-2023-41880 | >= 10.0.0, < 10.0.2 ; >= 11.0.0, < 11.0.2 ; >= 12.0.0, < 12.0.2 | Miscompilation of wasm `i64x2.shr_s` instruction with constant input on x86_64 | MEDIUM 5.3 | 0.7 % | ||
| CVE-2023-30624 | < 6.0.2 ; = 7.0.0 ; = 8.0.0 | Wasmtime has Undefined Behavior in Rust runtime functions | HIGH 8.8 | 0.4 % | ||
| CVE-2023-26489 | cranelift-codegen: >= 0.84.0, < 0.91.1 ; cranelift-codegen: >= 0.92.0, < 0.92.1 ; cranelift-codegen: >= 0.93.0, < 0.93.1 ; … | Guest-controlled out-of-bounds read/write on x86_64 in wasmtime | CRITICAL 10.0 | 1.3 % | ||
| CVE-2023-27477 | cranelift-codegen: >= 0.88.0, < 0.91.1 ; cranelift-codegen: >= 0.92.0, < 0.92.1 ; cranelift-codegen: >= 0.93.0, < 0.93.1 ; … | wasmtime is a fast and secure runtime for WebAssembly. Wasmtime's code generation backend, Cranelift, has a bug on x86_64 platforms for the | MEDIUM 4.3 | 0.6 % | ||
| CVE-2022-39394 | < 2.0.2 | wasmtime_trap_code C API function has out of bounds write vulnerability | CRITICAL 9.8 | 0.4 % | ||
| CVE-2022-39393 | >= 2.0.0, < 2.0.2 ; < 1.0.2 | Wasmtime vulnerable to data leakage between instances in the pooling allocator | HIGH 8.6 | 0.8 % | ||
| CVE-2022-39392 | < 2.0.2 | Wasmtime vulnerable to out of bounds read/write with zero-memory-pages configuration | HIGH 7.4 | 0.7 % | ||
| CVE-2022-31169 | < 0.38.2 ; < 0.85.2 | Cranelift vulnerable to miscompilation of constant values in division on AArch64 | HIGH 7.5 | 0.9 % | ||
| CVE-2022-31146 | >= 0.37.0, < 0.38.2 ; >= 0.84.0, < 0.85.2 | Use After Free in Wasmtime | HIGH 8.8 | 1.3 % | ||
| CVE-2022-31104 | wasmtime: < 0.38.1 ; cranelift-codegen: < 0.85.0 | Miscompilation of `i8x16.swizzle` and `select` with v128 inputs in Wasmtime | MEDIUM 5.6 | 1.8 % | ||
| CVE-2022-24791 | < 0.34.2 ; >= 0.35.0, < 0.35.2 | Use after free in Wasmtime | CRITICAL 9.8 | 1.2 % | ||
| CVE-2022-23636 | < 0.33.0 ; = 0.34.0 | Invalid drop of partially-initialized instances in wasmtime | HIGH 8.1 | 0.8 % | ||
| CVE-2021-39218 | >= 0.26.0, <= 0.29.0 | Out-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime | MEDIUM 6.3 | 0.3 % | ||
| CVE-2021-39219 | <= 0.29.0 | Wrong type for `Linker`-define functions when used across two `Engine`s | MEDIUM 6.3 | 0.4 % | ||
| CVE-2021-39216 | >=0.19.0, <=0.29.0 | Use after free passing `externref`s to Wasm in Wasmtime | MEDIUM 6.3 | 0.3 % | ||
| CVE-2021-32629 | <= 0.73.0 | Memory access due to code generation flaw in Cranelift module | HIGH 8.8 | 0.5 % |