RUSTSEC-2026-0268

vendorUSosv

Guest controlled-size host heap allocation through WASIp3 streams

view advisory published 2026-08-20Licence: CC0-1.0

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-x84v-gj2h-g759 For more information see the GitHub-hosted security advisory.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-115391USmedium5.8—
Wasmtime 46.0.0 before 46.0.3 and 47.0.0 before 47.0.4 contains an uncontrolled resource allocation vulnerability in its WASIp3 implementation that buffers guest-specified-length w…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan