{"id":"EUVD-2026-113202","enisaUuid":"1ef842c5-9ff1-3ea2-9a44-6823f0b5f268","description":"Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 panics when the host reads a component model stream as a different Rust item type than it was created with, because the host-to-host read path asserts matching TypeIds instead of returning an error. Guest code can return a host-created StreamReader\u003cU\u003e that the embedder reads as StreamReader\u003cT\u003e, where both types map to the same component model type, crashing the embedding process.","datePublished":"Oct 29, 2026, 3:58:15 PM","dateUpdated":"Oct 29, 2026, 3:58:15 PM","baseScore":5.9,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-63h4-6cx9-pjfj\nhttps://www.vulncheck.com/advisories/wasmtime-46.0.0-before-48.0.6-and-49.0.0-before-49.0.3-panic-via-streamreader-type-mismatch\n","aliases":"CVE-2026-119135\nGHSA-68fq-q9rp-8gvr\n","assigner":"VulnCheck","epss":0.21,"enisaIdProduct":[{"id":"b9f0e0d0-5259-38de-840a-f4b91ebeaa4c","product":{"name":"wasmtime","vendor":{"name":"bytecodealliance"}},"product_version":"49.0.0 \u003c49.0.3"},{"id":"f6bdb64d-6bcf-32a3-a653-774bee05f31a","product":{"name":"wasmtime","vendor":{"name":"bytecodealliance"}},"product_version":"46.0.0 \u003c48.0.6"}],"enisaIdVendor":[{"id":"d0ca1f88-8146-31b1-bef5-9de9381ffd4d","vendor":{"name":"bytecodealliance"}}],"enisaIdVulnerability":[{"id":"84e9b545-3485-39a1-a4cc-e76e56e7261a","vulnerability":{"id":"GHSA-68fq-q9rp-8gvr","description":"Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 panics when the host reads a component model stream as a different Rust item type than it was created with, because the host-to-host read path asserts matching TypeIds instead of returning an error. Guest code can return a host-created StreamReader\u003cU\u003e that the embedder reads as StreamReader\u003cT\u003e, where both types map to the same component model type, crashing the embedding process.","datePublished":"Oct 29, 2026, 6:30:59 PM","dateUpdated":"Oct 29, 2026, 6:30:59 PM","baseScore":0.0,"references":"https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-63h4-6cx9-pjfj\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-119135\nhttps://www.vulncheck.com/advisories/wasmtime-46.0.0-before-48.0.6-and-49.0.0-before-49.0.3-panic-via-streamreader-type-mismatch\n","enisa_id":"EUVD-2026-113202\n","aliases":"CVE-2026-119135\nGHSA-68fq-q9rp-8gvr\n","epss":0.0,"dataProcessed":"Nov 2, 2026, 7:03:54 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"b40295f2-5a5c-3824-8a80-d1b0287dbe8d","vulnerability":{"id":"CVE-2026-119135","description":"Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 panics when the host reads a component model stream as a different Rust item type than it was created with, because the host-to-host read path asserts matching TypeIds instead of returning an error. Guest code can return a host-created StreamReader\u003cU\u003e that the embedder reads as StreamReader\u003cT\u003e, where both types map to the same component model type, crashing the embedding process.","datePublished":"Oct 29, 2026, 3:58:15 PM","dateUpdated":"Oct 29, 2026, 3:58:15 PM","status":"PUBLISHED","baseScore":5.9,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-63h4-6cx9-pjfj\nhttps://www.vulncheck.com/advisories/wasmtime-46.0.0-before-48.0.6-and-49.0.0-before-49.0.3-panic-via-streamreader-type-mismatch\n","enisa_id":"EUVD-2026-113202\n","assigner":"VulnCheck","epss":0.21,"dataProcessed":"Nov 2, 2026, 7:16:53 AM","vulnerabilityProduct":[{"id":"24dcb82f-3ae5-3351-855e-472749e19daa","product":{"name":"wasmtime","vendor":{"name":"bytecodealliance"}},"product_version":"46.0.0 \u003c48.0.6"},{"id":"525fed88-60a5-3237-9ee0-f8b95fe8c1ae","product":{"name":"wasmtime","vendor":{"name":"bytecodealliance"}},"product_version":"49.0.0 \u003c49.0.3"}],"vulnerabilityVendor":[{"id":"df40f18a-dff2-300c-ae7d-8bc0365234f8","vendor":{"name":"bytecodealliance"}}]}}],"enisaIdAdvisory":[]}