AZL-111008
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-111008.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-111008
- Upstream
- Published
- 2026-10-22T19:17:45Z
- Modified
- 2026-10-27T05:36:16Z
- Summary
- CVE-2026-115383 affecting package cloud-hypervisor 52.0.152-1
- Details
-
Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains an improper validation vulnerability that accepts components whose core modules import WebAssembly tags with a subtype of the original type. Malicious guests can mis-type exception object payloads to corrupt the GC heap, causing Wasmtime to panic when the exceptions proposal is enabled.
- References