CVE-2026-115889 | Bytecode Alliance Wasmtime up to 36.0.18/42.x Cranelift compiler backend indices type confusion

October 23, 2026 Yanac

A vulnerability was found in Bytecode Alliance Wasmtime up to 36.0.18/42.x. It has been rated as critical. Affected by this vulnerability is an unknown functionality of the component Cranelift compiler backend. The manipulation of the argument indices leads to type confusion.

This vulnerability is documented as CVE-2026-115889. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More