CVE-2026-115393 | Bytecode Alliance Wasmtime up to 24.0.11/36.0.12/46.0.1/47.0.2 Store APIs new type confusion

October 22, 2026 Yanac

A vulnerability described as problematic has been identified in Bytecode Alliance Wasmtime up to 24.0.11/36.0.12/46.0.1/47.0.2. This affects the function Instance::new/StructRefPre::new/Tag::new of the component Store APIs. Such manipulation leads to type confusion.

This vulnerability is traded as CVE-2026-115393. An attack has to be approached locally. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More