Medium severity5.7NVD Advisory· Published Oct 22, 2026· Updated Oct 22, 2026
CVE-2026-115379
CVE-2026-115379
Description
Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a missing GC rooting vulnerability that leaves references live across try_call unrooted when compiling Wasm modules. Attackers can supply Wasm modules whose callee triggers garbage collection, leaving stale or dangling references that cause GC heap corruption or incorrect execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <48.0.4, <49.0.2
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.