tocsin

CVE-2026-34941

2 advisories.

crates.io/wasmtime CVE-2026-34941: high 8.1, EPSS 0.46%

Wasmtime: Heap OOB read in component model UTF-16 to latin1+utf16 string transcoding

Action: Upgrade wasmtime to 24.0.7 or later.

cargo update -p wasmtime --precise 24.0.7
cargo update -p wasmtime --precise 36.0.7
cargo update -p wasmtime --precise 42.0.2
cargo update -p wasmtime --precise 43.0.1

Affected

introducedfixedlast affected
024.0.7-
25.0.036.0.7-
37.0.042.0.2-
43.0.043.0.1-

Fixed versions

24.0.736.0.742.0.243.0.1

Sources

CVE-2026-34941 · published · modified · JSON

crates.io/wasmtime CVE-2026-34941: unknown, EPSS 0.46%

Heap OOB read in component model UTF-16 to latin1+utf16 string transcoding

Action: Upgrade wasmtime to 24.0.7 or later.

cargo update -p wasmtime --precise 24.0.7
cargo update -p wasmtime --precise 36.0.7
cargo update -p wasmtime --precise 42.0.2
cargo update -p wasmtime --precise 43.0.1

Affected

introducedfixedlast affected
0.0.0-024.0.7-
25.0.036.0.7-
37.0.042.0.2-
43.0.043.0.1-

Fixed versions

24.0.736.0.742.0.243.0.1

Sources

CVE-2026-34941 · published · modified · JSON