Intel

AIKIDO-2026-522246

wasmtime is vulnerable to Use After Free

Use After FreeGHSA-hw8m-q44c-ggrf Published 6 days ago

57

Medium Risk

This Affects:

RUSTwasmtime
47.0.0 - 48.0.3
Fixed in 48.0.4
49.0.0 - 49.0.1
Fixed in 49.0.2
Are you affected? Scan for Free

TL;DR

When Wasmtime compiles a Wasm module that uses GC references together with try_call, a GC reference that stays live across the call may not be rooted. If the callee triggers a garbage collection while that reference is unrooted, the reference becomes dangling once collection runs, and using it afterward can corrupt the GC heap or cause incorrect execution. Both the GC and exceptions proposals are on by default, so any module that uses both is exposed. The fix adds the missing rooting for references live across try_call.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range and you run WebAssembly modules with both the garbage collection and exceptions proposals enabled.

Background info

wasmtime is vulnerable to Use After Free in versions 47.0.0 - 48.0.3 and 49.0.0 - 49.0.1.

How to fix this

Upgrade the wasmtime library to the patch version.

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform