https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 02 Nov 2026 11:06:34 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-119132 <p>Wasmtime from 49.0.0 before 49.0.3 contains a denial-of-service vulnerability that allows a WebAssembly guest to trigger a host panic by transcoding overlapping strings in fused adapters. Attackers can make a same-instance component-to-component call transferring a string whose source and destination alias each other, crashing the host instead of raising a trap.</p> <p>Wasmtime from 49.0.0 before 49.0.3 contains a denial-of-service vulnerability that allows a WebAssembly guest to trigger a host panic by transcoding overlapping strings in fused adapters. Attackers can make a same-instance component-to-component call transferring a string whose source and destination alias each other, crashing the host instead of raising a trap.</p> https://db.gcve.eu/vuln/fkie_cve-2026-119132 https://db.gcve.eu/vuln/ghsa-hv43-9665-59p4 <p>Wasmtime from 49.0.0 before 49.0.3 contains a denial-of-service vulnerability that allows a WebAssembly guest to trigger a host panic by transcoding overlapping strings in fused adapters. Attackers can make a same-instance component-to-component call transferring a string whose source and destination alias each other, crashing the host instead of raising a trap.</p> <p>Wasmtime from 49.0.0 before 49.0.3 contains a denial-of-service vulnerability that allows a WebAssembly guest to trigger a host panic by transcoding overlapping strings in fused adapters. Attackers can make a same-instance component-to-component call transferring a string whose source and destination alias each other, crashing the host instead of raising a trap.</p> https://db.gcve.eu/vuln/ghsa-hv43-9665-59p4 https://db.gcve.eu/vuln/ubuntu-cve-2026-119132 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: rust-wasmtime, Ubuntu:26.10: rust-wasmtime, Ubuntu:26.04:LTS: rust-wasmtime</p> <p>Wasmtime from 49.0.0 before 49.0.3 contains a denial-of-service vulnerability that allows a WebAssembly guest to trigger a host panic by transcoding overlapping strings in fused adapters. Attackers can make a same-instance component-to-component call transferring a string whose source and destination alias each other, crashing the host instead of raising a trap.</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: rust-wasmtime, Ubuntu:26.10: rust-wasmtime, Ubuntu:26.04:LTS: rust-wasmtime</p> <p>Wasmtime from 49.0.0 before 49.0.3 contains a denial-of-service vulnerability that allows a WebAssembly guest to trigger a host panic by transcoding overlapping strings in fused adapters. Attackers can make a same-instance component-to-component call transferring a string whose source and destination alias each other, crashing the host instead of raising a trap.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-119132