CVE-2026-54913 | Bytecode Alliance WebAssembly Micro Runtime up to 2.4.4 Wasm Loader wasm_loader.c load_init_expr stack-based overflow

November 5, 2026 Yanac

A vulnerability classified as critical has been found in Bytecode Alliance WebAssembly Micro Runtime up to 2.4.4. Affected by this vulnerability is the function load_init_expr of the file core/iwasm/interpreter/wasm_loader.c of the component Wasm Loader. This manipulation causes stack-based buffer overflow.

This vulnerability appears as CVE-2026-54913. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More