Dashboard / CVE-2026-119133

CVE-2026-119133

LOW
INFO Priority: 0.00 BB Relevance: 34/100
Published: 2026-10-29 Modified: 2026-10-29 First seen: 2026-10-29 Status: active

Attack Surface

Network

CVSS Vector Breakdown

AV: Network
AC: High
PR: Low
UI: Passive
S: X
AT: Present
VC: None
VI: Low
VA: None

Description

Wasmtime 47.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a memory misalignment flaw in VMContext layout that causes undefined behavior when modules contain an odd number of exception tags. A WebAssembly module with an odd tag count misaligns subsequent host fields in embedders with exceptions enabled, although no exploitation path is currently known.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
bytecodealliance wasmtime 47.0.0 < 48.0.6

References & Advisories (2)

Bug Bounty Relevance

34 / 100
✓ Network accessible

CVSS Score

2.1 / 10.0 v4.0
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

No EPSS data available

Intelligence Sources

mitre ref →
nvd ref →

External Links