cyfenced.com →

[ CVE-2026-115893 · Published 23 Oct 2026 ]

Vulnerability in bytecodealliance wasmtime

CVSS 9.9 EPSS <1%No fix listed yet

[ Why it matters ]Priority signals

  • Critical severity: CVSS 9.9

[ Description ]Official description

Wasmtime is a runtime for WebAssembly. Prior to 36.0.19, 48.0.7, and 49.0.4, the Cranelift compiler backend on aarch64 can compile a Wasm br_table instruction with more than approximately 256,000 targets so that it has an incorrect conditional branch target. The branch can then jump to arbitrary other code at a user-controlled offset, allowing a user-controlled Wasm module to escape the sandbox on aarch64 engines using the default Cranelift backend. This issue is fixed in versions 36.0.19, 48.0.7, and 49.0.4.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ References ]References