CVE-2026-54914 | Bytecode Alliance wasm-micro-runtime up to 2.4.4 WASI POSIX libc_wasi_wrapper.c wasi_poll_oneoff/wasmtime_ssp_poll_oneoff heap-based overflow

November 5, 2026 Yanac

A vulnerability described as critical has been identified in Bytecode Alliance wasm-micro-runtime up to 2.4.4. Affected is the function wasi_poll_oneoff/wasmtime_ssp_poll_oneoff of the file core/iwasm/libraries/libc-wasi/libc_wasi_wrapper.c of the component WASI POSIX. The manipulation results in heap-based buffer overflow.

This vulnerability is reported as CVE-2026-54914. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More