CVE-2026-115893

Name of the Vulnerable Software and Affected Versions Wasmtime versions prior to 36.0.19 Wasmtime versions prior to 48.0.7 Wasmtime versions prior to 49.0.4

Description The Cranelift compiler backend on aarch64 architectures can incorrectly compile a Wasm br table instruction when it contains more than approximately 256,000 targets. This results in an incorrect conditional branch target, enabling a user-controlled Wasm module to jump to arbitrary code at a controlled offset and escape the sandbox.

Recommendations Update to version 36.0.19 or later. Update to version 48.0.7 or later. Update to version 49.0.4 or later.