Description


Wasmtime 47.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a memory misalignment flaw in VMContext layout that causes undefined behavior when modules contain an odd number of exception tags. A WebAssembly module with an odd tag count misaligns subsequent host fields in embedders with exceptions enabled, although no exploitation path is currently known.

Related CPE's


Could not find any relations

Weaknesses



CWE-758

CVSS impact metrics


CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N

2.6 · Low

Information


Source identifier

[email protected]

Vulnerability status

Deferred

Published

2026-10-29T16:18:06.423Z

14 hours ago

Last modified

2026-10-29T18:17:30.473Z

12 hours ago