AZL-111089
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-111089.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-111089
- Upstream
- Published
- 2026-10-22T19:17:45Z
- Modified
- 2026-10-29T05:34:21Z
- Summary
- CVE-2026-115383 affecting package rust 1.96.1-2
- Details
-
Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains an improper validation vulnerability that accepts components whose core modules import WebAssembly tags with a subtype of the original type. Malicious guests can mis-type exception object payloads to corrupt the GC heap, causing Wasmtime to panic when the exceptions proposal is enabled.
- References