CVE-2026-119142 | Bytecode Alliance Wasmtime prior 48.0.6/49.0.3 Async Call Cleanup TypedFunc::call_async resource consumption

October 29, 2026 Yanac

A vulnerability described as problematic has been identified in Bytecode Alliance Wasmtime. This affects the function TypedFunc::call_async of the component Async Call Cleanup. Executing a manipulation can lead to resource consumption.

This vulnerability is registered as CVE-2026-119142. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More