CVE-2026-115389 | Bytecode Alliance Wasmtime up to 36.0.15/48.0.2/49.0.0 Dynamically-typed Val API denial of service

October 22, 2026 Yanac

A vulnerability was found in Bytecode Alliance Wasmtime up to 36.0.15/48.0.2/49.0.0. It has been classified as problematic. Affected by this issue is some unknown functionality of the component Dynamically-typed Val API. This manipulation causes denial of service.

This vulnerability is tracked as CVE-2026-115389. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More