CVE-2026-119133 | BDVDB-2026-397889 Detail
bytecodealliancewasmtime
Description#
Wasmtime 47.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a memory misalignment flaw in VMContext layout that causes undefined behavior when modules contain an odd number of exception tags. A WebAssembly module with an odd tag count misaligns subsequent host fields in embedders with exceptions enabled, although no exploitation path is currently known.
Impact#
Per CVSS v3.1: confidentiality impact none, integrity impact low, availability impact none. Attack vector: network.
Weaknesses#
- CWE-758 Reliance on Undefined, Unspecified, or Implementation-Defined Behavior
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.