CVE-2026-54912 | Bytecode Alliance WebAssembly Micro Runtime up to 2.4.4 Two-Pass Fast Interpreter Loader wasm_loader.c wasm_loader_get_const_offset heap-based overflow

A vulnerability marked as problematic has been reported in Bytecode Alliance WebAssembly Micro Runtime up to 2.4.4. This impacts the function wasm_loader_get_const_offset of the file core/iwasm/interpreter/wasm_loader.c of the component Two-Pass Fast Interpreter Loader. The manipulation leads to heap-based buffer overflow.

This vulnerability is documented as CVE-2026-54912. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More