Skip to content

RUSTSEC-2026-0096: Miscompiled guest heap access enables sandbox escape on aarch64 Cranelift #6506

@github-actions

Description

@github-actions

Miscompiled guest heap access enables sandbox escape on aarch64 Cranelift

Details
Package wasmtime
Version 38.0.4
URL GHSA-jhxm-h53p-jm7w
Date 2026-04-09
Patched versions >=36.0.7, <37.0.0,>=42.0.2, <43.0.0,>=43.0.1

This is an entry in the RustSec database for the Wasmtime security advisory
located at
GHSA-jhxm-h53p-jm7w
For more information see the GitHub-hosted security advisory.

See advisory page for additional details.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions