VulnSocial

CVE-2026-34944Disclosure(bytecodealliance / wasmtime)

LOWCVSS 5.7 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, On x86-64 platforms with SSE3 disabled Wasmtime's compilation of the f64x2.splat WebAssembly instruction with Cranelift may load 8 more bytes than is necessary. When signals-based-traps are disabled this can result in a uncaught segfault due to loading from unmapped guard pages. With guard pages disabled it's possible for out-of-sandbox data to be loaded, but this data is not visible to WebAssembly guests. This vulnerability is fixed in 24.0.7, 36.0.7, 42.0.2, and 43.0.1.

bytecodealliance CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-248

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • wasmtime

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • 2 total mentions across 1 day

Affected systems

Vendors
bytecodealliance
Products
wasmtime

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-04-09: 2Technical Details · 2026-04-09: 104-09
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    General

    🚨*CVE* CVE-2026-34944 Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, On x86-64 platforms with SSE3 disabled Wasmtime's compilation of the f64x2.splat W… https://www.cve.org/CVERecord?id=CVE-2026-34944 ----- Traducción: CVE-2026-34944 Was… http://infoflow.cloud`

    Post summary

    The post briefly references CVE-2026-34944, listing affected Wasmtime releases and providing a link to the CVE record, but does not supply any PoC, exploit details, patch information, or confirmation of active exploitation.

    0000031
    67 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-34944 Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, On x86-64 platforms with SSE3 disabled Wasmtime's compilation of the f64x2.splat W… https://www.cve.org/CVERecord?id=CVE-2026-34944

    Post summary

    The text announces CVE-2026-34944, a vulnerability in Wasmtime WebAssembly runtime affecting specific older versions on x86‑64 with SSE3 disabled, with a link to the official CVE record for details.

    00000135
    57.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appbytecodealliancewasmtime-rust-

Explore more

Back to dashboardbytecodealliance CVEswasmtime vulnerabilities