Skip to content

RUSTSEC-2026-0087: Wasmtime segfault or unused out-of-sandbox load with f64x2.splat operator on Cranelift x86-64 #6513

@github-actions

Description

@github-actions

Wasmtime segfault or unused out-of-sandbox load with f64x2.splat operator on Cranelift x86-64

Details
Package wasmtime
Version 38.0.4
URL GHSA-qqfj-4vcm-26hv
Date 2026-04-09
Patched versions >=24.0.7, <25.0.0,>=36.0.7, <37.0.0,>=42.0.2, <43.0.0,>=43.0.1

This is an entry in the RustSec database for the Wasmtime security advisory
located at
GHSA-qqfj-4vcm-26hv
For more information see the GitHub-hosted security advisory.

See advisory page for additional details.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions