RUSTSEC-2026-0356
Panic on erroneous call-to-host from guest realloc call
Published Oct 14, 2026 · updated Oct 14, 2026
This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-7v24-42x9-pxf7 For more information see the GitHub-hosted security advisory.
Timeline
Detection, updates, and resolution for this record.
Oct 14, 2026 · GitHub Advisory Database
Detected
This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-7v24-42x9-pxf7 For more information see the GitHub-hosted security advisory.
Oct 14, 2026 · GitHub Advisory Database
Fix available
wasmtime fixed in 48.0.6
Oct 14, 2026 · GitHub Advisory Database
Fix available
wasmtime fixed in 48.0.6
Oct 14, 2026 · GitHub Advisory Database
Updated
This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-7v24-42x9-pxf7 For more information see the GitHub-hosted security advisory.
Affected
- crates.io wasmtime46.0.0 → 48.0.6
Sources
- GitHub Advisory DatabaseGHSA-7v24-42x9-pxf7
GitHub Advisory Database record mirrored by OSV.
github.com - OSV.devRUSTSEC-2026-0356
Panic on erroneous call-to-host from guest realloc call
osv.dev