OSV-2026-169

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/wamr/OSV-2026-169.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-169
Published
2026-02-01T00:01:05Z
Modified
2026-02-01T00:01:05Z
Summary
Null-dereference READ in execute_post_instantiate_functions
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=479872443

Crash type: Null-dereference READ
Crash state:
execute_post_instantiate_functions
wasm_instantiate
wasm_runtime_instantiate
References

Affected packages

OSS-Fuzz / wamr

Package

Name
wamr
Purl
pkg:generic/wamr

Affected ranges

Type
GIT
Repo
https://github.com/bytecodealliance/wasm-micro-runtime
Events
Introduced
9a23968fdacc0df4ec7066bc19a412f8b7a8bd69
Fixed
8d069c230c3cc83c622c4d338d84475ff15e3a00

Ecosystem specific 

{
    "severity": null
}

Database specific

fixed_range 
"fcec30e93387cadcaa0a7eff3d3a6ec84e91f9fd:8d069c230c3cc83c622c4d338d84475ff15e3a00"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/wamr/OSV-2026-169.yaml"