Skip to content

RUSTSEC-2026-0096: Miscompiled guest heap access enables sandbox escape on aarch64 Cranelift #3171

@github-actions

Description

@github-actions

Miscompiled guest heap access enables sandbox escape on aarch64 Cranelift

Details
Package wasmtime
Version 36.0.6
URL GHSA-jhxm-h53p-jm7w
Date 2026-04-09
Patched versions >=36.0.7, <37.0.0,>=42.0.2, <43.0.0,>=43.0.1

This is an entry in the RustSec database for the Wasmtime security advisory
located at
GHSA-jhxm-h53p-jm7w
For more information see the GitHub-hosted security advisory.

See advisory page for additional details.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions