{"id":"EUVD-2026-21023","enisaUuid":"c37a2db1-57ee-3877-bb22-1d64f9b440eb","description":"Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, On x86-64 platforms with SSE3 disabled Wasmtime\u0027s compilation of the f64x2.splat WebAssembly instruction with Cranelift may load 8 more bytes than is necessary. When signals-based-traps are disabled this can result in a uncaught segfault due to loading from unmapped guard pages. With guard pages disabled it\u0027s possible for out-of-sandbox data to be loaded, but this data is not visible to WebAssembly guests. This vulnerability is fixed in 24.0.7, 36.0.7, 42.0.2, and 43.0.1.","datePublished":"Apr 9, 2026, 6:38:16 PM","dateUpdated":"Apr 13, 2026, 3:38:40 PM","baseScore":4.1,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-qqfj-4vcm-26hv\n","aliases":"CVE-2026-34944\nGHSA-qqfj-4vcm-26hv\n","assigner":"GitHub_M","epss":0.23,"enisaIdProduct":[{"id":"1a68163d-c9c1-3333-ab10-9f9489868155","product":{"name":"wasmtime","vendor":{"name":"bytecodealliance"}},"product_version":"25.0.0, \u003c 36.0.7"},{"id":"579f0f8c-f401-30e5-a472-87666e6af168","product":{"name":"wasmtime","vendor":{"name":"bytecodealliance"}},"product_version":"37.0.0, \u003c 42.0.2"},{"id":"7da4c1df-eebb-3ab0-91b5-7c77781a7c10","product":{"name":"wasmtime","vendor":{"name":"bytecodealliance"}},"product_version":"43.0.0, \u003c 44.0.1"},{"id":"ec10844d-914a-3912-8967-8e4d11941ee9","product":{"name":"wasmtime","vendor":{"name":"bytecodealliance"}},"product_version":"\u003c 24.0.7"}],"enisaIdVendor":[{"id":"4fe09caa-a6e5-3ca2-af22-611d4bda6379","vendor":{"name":"bytecodealliance"}}],"enisaIdVulnerability":[{"id":"5ee6cf41-a309-33e0-9567-8a509fd53d9f","vulnerability":{"id":"GHSA-qqfj-4vcm-26hv","description":"Wasmtime segfault or unused out-of-sandbox load with `f64x2.splat` operator on x86-64 ","datePublished":"Apr 9, 2026, 8:22:45 PM","dateUpdated":"Apr 24, 2026, 9:03:37 PM","baseScore":0.0,"references":"https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-qqfj-4vcm-26hv\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-34944\nhttps://github.com/bytecodealliance/wasmtime\nhttps://rustsec.org/advisories/RUSTSEC-2026-0087.html\n","enisa_id":"EUVD-2026-21023\n","aliases":"CVE-2026-34944\nGHSA-qqfj-4vcm-26hv\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:55:10 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"b251f20d-ac2f-338d-9e8f-4b1ae9cdddc4","vulnerability":{"id":"CVE-2026-34944","description":"Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, On x86-64 platforms with SSE3 disabled Wasmtime\u0027s compilation of the f64x2.splat WebAssembly instruction with Cranelift may load 8 more bytes than is necessary. When signals-based-traps are disabled this can result in a uncaught segfault due to loading from unmapped guard pages. With guard pages disabled it\u0027s possible for out-of-sandbox data to be loaded, but this data is not visible to WebAssembly guests. This vulnerability is fixed in 24.0.7, 36.0.7, 42.0.2, and 43.0.1.","datePublished":"Apr 9, 2026, 6:38:16 PM","dateUpdated":"Apr 13, 2026, 3:38:40 PM","status":"PUBLISHED","baseScore":4.1,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-qqfj-4vcm-26hv\n","enisa_id":"EUVD-2026-21023\n","assigner":"GitHub_M","epss":0.23,"dataProcessed":"Oct 30, 2026, 7:19:03 AM","vulnerabilityProduct":[{"id":"a01f67d9-8784-3b29-a4f2-9ca361804b26","product":{"name":"wasmtime","vendor":{"name":"bytecodealliance"}},"product_version":"37.0.0, \u003c 42.0.2"},{"id":"b0fcbab5-7c2e-361c-ac8c-ef63666c3b52","product":{"name":"wasmtime","vendor":{"name":"bytecodealliance"}},"product_version":"25.0.0, \u003c 36.0.7"},{"id":"f60a59ff-ffee-3f96-925b-bc4b7602deed","product":{"name":"wasmtime","vendor":{"name":"bytecodealliance"}},"product_version":"43.0.0, \u003c 44.0.1"},{"id":"fe11f37b-212d-3169-8299-32130a12eb10","product":{"name":"wasmtime","vendor":{"name":"bytecodealliance"}},"product_version":"\u003c 24.0.7"}],"vulnerabilityVendor":[{"id":"96162028-d68f-39fa-8bc7-3807c743ab2e","vendor":{"name":"bytecodealliance"}}]}}],"enisaIdAdvisory":[{"id":"740ff300-5b7e-3cb7-9123-451eeb4310f7","advisory":{"id":"SUSE-SU-2026:21789-1","description":"Security update for tree-sitter","summary":"Security update for tree-sitter","datePublished":"May 14, 2026, 8:09:11 AM","dateUpdated":"Sep 29, 2026, 5:26:26 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_21789-1.json\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202621789-1/\nhttps://lists.suse.com/pipermail/sle-updates/2026-May/046824.html\nhttps://bugzilla.suse.com/1259205\nhttps://bugzilla.suse.com/1261839\nhttps://bugzilla.suse.com/1261871\nhttps://bugzilla.suse.com/1261894\nhttps://bugzilla.suse.com/1261954\nhttps://bugzilla.suse.com/1261963\nhttps://bugzilla.suse.com/1261968\nhttps://bugzilla.suse.com/1261974\nhttps://bugzilla.suse.com/1262007\nhttps://bugzilla.suse.com/1262032\nhttps://bugzilla.suse.com/1262036\nhttps://bugzilla.suse.com/1262040\nhttps://www.suse.com/security/cve/CVE-2026-34941/\nhttps://www.suse.com/security/cve/CVE-2026-34942/\nhttps://www.suse.com/security/cve/CVE-2026-34943/\nhttps://www.suse.com/security/cve/CVE-2026-34944/\nhttps://www.suse.com/security/cve/CVE-2026-34945/\nhttps://www.suse.com/security/cve/CVE-2026-34946/\nhttps://www.suse.com/security/cve/CVE-2026-34987/\nhttps://www.suse.com/security/cve/CVE-2026-34988/\nhttps://www.suse.com/security/cve/CVE-2026-35186/\nhttps://www.suse.com/security/cve/CVE-2026-35195/\n","aliases":"CVE-2026-34941\nCVE-2026-34942\nCVE-2026-34943\nCVE-2026-34944\nCVE-2026-34945\nCVE-2026-34946\nCVE-2026-34987\nCVE-2026-34988\nCVE-2026-35186\nCVE-2026-35195\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"01851624-fbed-34f6-9177-ac59eb1400c0","product":{"name":"tree-sitter-devel-0:0.26.8-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"07906a64-728b-3906-8470-06eec21f49a5","product":{"name":"libtree-sitter0_26-x86-64-v3-0:0.26.8-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"0adb602e-605f-31b6-9117-e8ca784ce76a","product":{"name":"tree-sitter-devel-0:0.26.8-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"1400626c-30cd-3864-b6a9-182a4bd2358a","product":{"name":"tree-sitter-devel-0:0.26.8-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"1bfa8258-0b70-350a-922e-f03fcadff58f","product":{"name":"libtree-sitter0_26-0:0.26.8-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"260a1a1f-8e03-3cea-a530-615e8402d236","product":{"name":"libtree-sitter0_26-0:0.26.8-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"27a1de74-ec6f-377b-aad0-9b332f66ab76","product":{"name":"tree-sitter-devel-0.26.8-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"34c29c81-e91b-3d6e-8707-3a4d3c07c6e4","product":{"name":"libtree-sitter0_26-0:0.26.8-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"4fcfd168-bbab-3b0d-a23c-1792516c9315","product":{"name":"tree-sitter-devel-0.26.8-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"5326f691-16a9-355c-85c5-7b2a36582150","product":{"name":"tree-sitter-devel-0:0.26.8-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"6436e314-1782-3074-81cc-940f870f1ee3","product":{"name":"tree-sitter-devel-0.26.8-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"85635639-7159-394a-bb88-158aa7480119","product":{"name":"SUSE Linux Enterprise Server for SAP applications 16.0","vendor":{"name":"SUSE"}}},{"id":"8855c1ea-ad18-33fe-aa32-e0a6cbb4b5e1","product":{"name":"libtree-sitter0_26-0:0.26.8-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"a499603f-86ad-302e-9800-f8754041ba23","product":{"name":"tree-sitter-devel-0.26.8-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"af61517d-f993-3c93-9e39-72517f8c567c","product":{"name":"libtree-sitter0_26-x86-64-v3-0.26.8-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"af9e599c-9827-3038-abd3-810004e1db30","product":{"name":"SUSE Linux Enterprise Server 16.0","vendor":{"name":"SUSE"}}},{"id":"c4c02bfb-c8e2-3ed4-b881-64c43bf06b74","product":{"name":"libtree-sitter0_26-0.26.8-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"d7b67c17-3cb9-3549-9e98-5384349bf65b","product":{"name":"libtree-sitter0_26-0.26.8-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"df66d873-e4be-3bf7-abb8-809f757392fc","product":{"name":"libtree-sitter0_26-0.26.8-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"ea47a3c1-9419-37e6-b812-f3266e285a5a","product":{"name":"libtree-sitter0_26-0.26.8-160000.1.1.aarch64","vendor":{"name":"SUSE"}}}]}},{"id":"a5a16907-2f6c-3c73-bc33-a90649bdbfd3","advisory":{"id":"openSUSE-SU-2026:20749-1","description":"Security update for tree-sitter","summary":"Security update for tree-sitter","datePublished":"May 14, 2026, 8:07:53 AM","dateUpdated":"Sep 29, 2026, 5:31:22 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_20749-1.json\nhttps://bugzilla.suse.com/1259205\nhttps://bugzilla.suse.com/1261839\nhttps://bugzilla.suse.com/1261871\nhttps://bugzilla.suse.com/1261894\nhttps://bugzilla.suse.com/1261954\nhttps://bugzilla.suse.com/1261963\nhttps://bugzilla.suse.com/1261968\nhttps://bugzilla.suse.com/1261974\nhttps://bugzilla.suse.com/1262007\nhttps://bugzilla.suse.com/1262032\nhttps://bugzilla.suse.com/1262036\nhttps://bugzilla.suse.com/1262040\nhttps://www.suse.com/security/cve/CVE-2026-34941/\nhttps://www.suse.com/security/cve/CVE-2026-34942/\nhttps://www.suse.com/security/cve/CVE-2026-34943/\nhttps://www.suse.com/security/cve/CVE-2026-34944/\nhttps://www.suse.com/security/cve/CVE-2026-34945/\nhttps://www.suse.com/security/cve/CVE-2026-34946/\nhttps://www.suse.com/security/cve/CVE-2026-34987/\nhttps://www.suse.com/security/cve/CVE-2026-34988/\nhttps://www.suse.com/security/cve/CVE-2026-35186/\nhttps://www.suse.com/security/cve/CVE-2026-35195/\n","aliases":"CVE-2026-34941\nCVE-2026-34942\nCVE-2026-34943\nCVE-2026-34944\nCVE-2026-34945\nCVE-2026-34946\nCVE-2026-34987\nCVE-2026-34988\nCVE-2026-35186\nCVE-2026-35195\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"05a5180b-019b-3bc0-842e-6e10b13980aa","product":{"name":"libtree-sitter0_26-0:0.26.8-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"091ff1ee-8d0a-3d7a-84a6-974ec06bdd61","product":{"name":"tree-sitter-0:0.26.8-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"186339de-7392-332c-ae2a-d52668025bf4","product":{"name":"tree-sitter-0:0.26.8-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"2c4b7093-90ac-3e4b-a5f2-9c435c558dbc","product":{"name":"libtree-sitter0_26-0:0.26.8-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"2f03a92a-d648-36bb-a099-32561164df42","product":{"name":"tree-sitter-devel-0:0.26.8-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"5181887b-e734-3865-a234-0646418c1be5","product":{"name":"libtree-sitter0_26-0:0.26.8-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"5a1f6f47-f16c-3430-b69c-16f6d8a833dc","product":{"name":"tree-sitter-0:0.26.8-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"60c9ec65-b40b-3a55-869e-d50306f09f2e","product":{"name":"libtree-sitter0_26-0:0.26.8-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"6735312c-af30-39da-807a-5879276e3edb","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}},{"id":"689284a1-2e59-33c7-b34d-48b45bbccc44","product":{"name":"libtree-sitter0_26-x86-64-v3-0:0.26.8-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"6b7ff6e6-bb5d-36c0-9731-9680609b3477","product":{"name":"tree-sitter-devel-0:0.26.8-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"715c5727-93a3-3ae8-9fc7-d71e42c658fc","product":{"name":"tree-sitter-devel-0:0.26.8-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"8ceaa785-018b-3ca1-81bc-f8c1c47bb415","product":{"name":"tree-sitter-0:0.26.8-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"efd8df71-48e5-334f-a296-b9efdd95c089","product":{"name":"tree-sitter-devel-0:0.26.8-160000.1.1.aarch64","vendor":{"name":"SUSE"}}}]}}]}