CVE-2026-44216
Fixed in a distro release EPSS <1%CVSS 5.9
Wasmtime is a runtime for WebAssembly. From 30.0.0 to 36.0.8, 43.0.2, and 44.0.1, Wasmtime's allocation logic for a WebAssembly table contained checked arithmetic which panicked on overflow. This overflow is possible to trigger, and thus panic, when a table with an extremely large size is allocated. This is possible with the WebAssembly memory64 proposal where tables can have sizes in the 64-bit range as opposed to the previous 32-bit range which would not overflow. The panic happens when attempting to create a very large table, such as when instantiating a WebAssembly module or component. This vulnerability is fixed in 36.0.8, 43.0.2, and 44.0.1.
Products: bytecodealliance wasmtime, Red Hat Hardened Images, Red Hat Enterprise Linux 10
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| crates.io | wasmtime | 36.0.8 |
| crates.io | wasmtime | 43.0.2 |
| crates.io | wasmtime | 44.0.1 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | wizer | 11.0.3-r12 |
| Chainguard | yara-x | 1.16.0-r1 |
| Debian 13 | rust-wasmtime | no fix |
| Debian 14 | rust-wasmtime | 36.0.8+dfsg-1 |
| Red Hat hummingbird 1 | cargo | 0:1.97.1-2.hum1 |
| Red Hat hummingbird 1 | clippy | 0:1.97.1-2.hum1 |
| Red Hat hummingbird 1 | rust | 0:1.97.1-2.hum1 |
| Red Hat hummingbird 1 | rust-analyzer | 0:1.97.1-2.hum1 |
| Red Hat hummingbird 1 | rust-debugger-common | 0:1.97.1-2.hum1 |
| Red Hat hummingbird 1 | rust-doc | 0:1.97.1-2.hum1 |
| Red Hat hummingbird 1 | rust-gdb | 0:1.97.1-2.hum1 |
| Red Hat hummingbird 1 | rust-lldb | 0:1.97.1-2.hum1 |
| Red Hat hummingbird 1 | rust-src | 0:1.97.1-2.hum1 |
| Red Hat hummingbird 1 | rust-std-static | 0:1.97.1-2.hum1 |
| Red Hat hummingbird 1 | rust-std-static-aarch64-unknown-none-softfloat | 0:1.97.1-2.hum1 |
| Red Hat hummingbird 1 | rust-std-static-aarch64-unknown-uefi | 0:1.97.1-2.hum1 |
| Red Hat hummingbird 1 | rust-std-static-i686-pc-windows-gnu | 0:1.97.1-2.hum1 |
| Red Hat hummingbird 1 | rust-std-static-wasm32-unknown-unknown | 0:1.97.1-2.hum1 |
| Red Hat hummingbird 1 | rust-std-static-wasm32-wasip1 | 0:1.97.1-2.hum1 |
| Red Hat hummingbird 1 | rust-std-static-x86_64-pc-windows-gnu | 0:1.97.1-2.hum1 |
| Red Hat hummingbird 1 | rust-std-static-x86_64-unknown-none | 0:1.97.1-2.hum1 |
| Red Hat hummingbird 1 | rust-std-static-x86_64-unknown-uefi | 0:1.97.1-2.hum1 |
| Red Hat hummingbird 1 | rustfmt | 0:1.97.1-2.hum1 |
| SUSE Linux Enterprise Server 16.0 | tree-sitter | 0.26.8-160000.2.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | tree-sitter | 0.26.8-160000.2.1 |
| Ubuntu 24.04 LTS | rust-wasmtime | no fix |
| Ubuntu 25.10 | rust-wasmtime | no fix |
| Ubuntu 26.04 LTS | rust-wasmtime | no fix |
| Ubuntu 26.10 | rust-wasmtime | no fix |
| Wolfi | wizer | 11.0.3-r12 |
| Wolfi | yara-x | 1.16.0-r1 |
| openSUSE Tumbleweed | tree-sitter | 0.26.8-3.1 |