RUSTSEC-2026-0114
NoneCVSS
—
EPSS
—
Published
Apr 30, 2026
CISA due date
—
The record
Panic when allocating a table exceeding the size of the host's address space
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | wasmtime | 30.0.0 | 36.0.8 |
| crates.io | wasmtime | 37.0.0 | 43.0.2 |
Related vulnerabilities
- CVE-2026-44216 Wasmtime is a runtime for WebAssembly. Same vulnerability
- CVE-2026-34988 Wasmtime is a runtime for WebAssembly. Also affects wasmtime
- CVE-2026-35195 Wasmtime is a runtime for WebAssembly. Also affects wasmtime
- CVE-2026-34987 Wasmtime is a runtime for WebAssembly. Also affects wasmtime
- CVE-2026-35186 Wasmtime is a runtime for WebAssembly. Also affects wasmtime
- CVE-2026-34971 Wasmtime is a runtime for WebAssembly. Also affects wasmtime
- CVE-2026-34983 Wasmtime is a runtime for WebAssembly. Also affects wasmtime
- CVE-2026-34944 Wasmtime is a runtime for WebAssembly. Also affects wasmtime