Search

Find a vulnerability

Search criteria

    Related vulnerabilities

    RUSTSEC-2026-0326 (GHSA-HW8M-Q44C-GGRF)

    Vulnerability from osv_rustsec – Published: 2026-10-02 12:00 – Updated: 2026-10-02 20:27 – Source website
    VLAI
    Summary
    Rooting for GC values live across `try_call` may be missing, causing GC heap corruption
    Details

    This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-hw8m-q44c-ggrf For more information see the GitHub-hosted security advisory.


    {
      "affected": [
        {
          "database_specific": {
            "categories": [],
            "cvss": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "informational": null
          },
          "ecosystem_specific": {
            "affected_functions": null,
            "affects": {
              "arch": [],
              "functions": [],
              "os": []
            }
          },
          "package": {
            "ecosystem": "crates.io",
            "name": "wasmtime",
            "purl": "pkg:cargo/wasmtime"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "47.0.0"
                },
                {
                  "fixed": "48.0.4"
                },
                {
                  "introduced": "49.0.0"
                },
                {
                  "fixed": "49.0.2"
                }
              ],
              "type": "SEMVER"
            }
          ],
          "versions": []
        }
      ],
      "aliases": [
        "GHSA-hw8m-q44c-ggrf"
      ],
      "database_specific": {
        "license": "CC0-1.0"
      },
      "details": "This is an entry in the RustSec database for the Wasmtime security advisory\nlocated at\nhttps://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-hw8m-q44c-ggrf\nFor more information see the GitHub-hosted security advisory.",
      "id": "RUSTSEC-2026-0326",
      "modified": "2026-10-02T20:27:46Z",
      "published": "2026-10-02T12:00:00Z",
      "references": [
        {
          "type": "PACKAGE",
          "url": "https://crates.io/crates/wasmtime"
        },
        {
          "type": "ADVISORY",
          "url": "https://rustsec.org/advisories/RUSTSEC-2026-0326.html"
        },
        {
          "type": "WEB",
          "url": "https://github.com/bytecodealliance/wasmtime/pull/14478"
        }
      ],
      "related": [],
      "severity": [
        {
          "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
          "type": "CVSS_V3"
        }
      ],
      "summary": "Rooting for GC values live across `try_call` may be missing, causing GC heap corruption"
    }