{"id":"EUVD-2026-113200","enisaUuid":"b9b9cda5-f8bf-36f4-904b-f5d86d9716fd","description":"Wasmtime 47.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a memory misalignment flaw in VMContext layout that causes undefined behavior when modules contain an odd number of exception tags. A WebAssembly module with an odd tag count misaligns subsequent host fields in embedders with exceptions enabled, although no exploitation path is currently known.","datePublished":"Oct 29, 2026, 3:58:14 PM","dateUpdated":"Oct 29, 2026, 5:14:39 PM","baseScore":2.1,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-p79w-pv2r-29qp\nhttps://www.vulncheck.com/advisories/wasmtime-47.0.0-before-48.0.6-and-49.0.0-before-49.0.3-misaligned-vmcontext-via-exception-tags\n","aliases":"CVE-2026-119133\nGHSA-9283-62cg-q26h\n","assigner":"VulnCheck","epss":0.0,"enisaIdProduct":[{"id":"d461a895-9e0a-312d-a69c-b9dfd83f5ca0","product":{"name":"wasmtime","vendor":{"name":"bytecodealliance"}},"product_version":"49.0.0 \u003c49.0.3"},{"id":"dd3789ed-fc13-3ff4-8bc6-7b78d90759ce","product":{"name":"wasmtime","vendor":{"name":"bytecodealliance"}},"product_version":"47.0.0 \u003c48.0.6"}],"enisaIdVendor":[{"id":"4c07daf9-efa3-37a6-a86a-4b9ef16dc238","vendor":{"name":"bytecodealliance"}}],"enisaIdVulnerability":[{"id":"33d64ee5-0ddc-3fa0-a538-a0e321370d7a","vulnerability":{"id":"GHSA-9283-62cg-q26h","description":"Wasmtime 47.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a memory misalignment flaw in VMContext layout that causes undefined behavior when modules contain an odd number of exception tags. A WebAssembly module with an odd tag count misaligns subsequent host fields in embedders with exceptions enabled, although no exploitation path is currently known.","datePublished":"Oct 29, 2026, 6:30:59 PM","dateUpdated":"Oct 29, 2026, 6:30:59 PM","baseScore":0.0,"references":"https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-p79w-pv2r-29qp\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-119133\nhttps://www.vulncheck.com/advisories/wasmtime-47.0.0-before-48.0.6-and-49.0.0-before-49.0.3-misaligned-vmcontext-via-exception-tags\n","enisa_id":"EUVD-2026-113200\n","aliases":"CVE-2026-119133\nGHSA-9283-62cg-q26h\n","epss":0.0,"dataProcessed":"Oct 30, 2026, 5:00:57 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"7933160a-5a49-3bb7-90a3-6b682537a251","vulnerability":{"id":"CVE-2026-119133","description":"Wasmtime 47.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a memory misalignment flaw in VMContext layout that causes undefined behavior when modules contain an odd number of exception tags. A WebAssembly module with an odd tag count misaligns subsequent host fields in embedders with exceptions enabled, although no exploitation path is currently known.","datePublished":"Oct 29, 2026, 3:58:14 PM","dateUpdated":"Oct 29, 2026, 5:14:39 PM","status":"PUBLISHED","baseScore":2.1,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-p79w-pv2r-29qp\nhttps://www.vulncheck.com/advisories/wasmtime-47.0.0-before-48.0.6-and-49.0.0-before-49.0.3-misaligned-vmcontext-via-exception-tags\n","enisa_id":"EUVD-2026-113200\n","assigner":"VulnCheck","epss":0.0,"dataProcessed":"Oct 30, 2026, 5:00:40 AM","vulnerabilityProduct":[{"id":"d54f48ab-334b-3ac9-a383-60c7699abc43","product":{"name":"wasmtime","vendor":{"name":"bytecodealliance"}},"product_version":"49.0.0 \u003c49.0.3"},{"id":"de297099-83db-3cc2-8990-a2ccc1aadb04","product":{"name":"wasmtime","vendor":{"name":"bytecodealliance"}},"product_version":"47.0.0 \u003c48.0.6"}],"vulnerabilityVendor":[{"id":"22a4abd7-90ea-39dc-824d-45fb66c4ade9","vendor":{"name":"bytecodealliance"}}]}}],"enisaIdAdvisory":[]}