tocsin

crates.io/wasmtime CVE-2026-34942: unknown, EPSS 0.42%

Panic when transcoding misaligned component model UTF-16 strings

Action: Upgrade wasmtime to 24.0.7 or later.

cargo update -p wasmtime --precise 24.0.7
cargo update -p wasmtime --precise 36.0.7
cargo update -p wasmtime --precise 42.0.2
cargo update -p wasmtime --precise 43.0.1

Affected

introducedfixedlast affected
0.0.0-024.0.7-
25.0.036.0.7-
37.0.042.0.2-
43.0.043.0.1-

Fixed versions

24.0.736.0.742.0.243.0.1

Sources

CVE-2026-34942 · published · modified · JSON