{"id":"CVE-2026-115393","aliases":[],"cve":{"records":[{"id":"CVE-2026-115393","source":"VulnCheck","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-22T11:27:18.001Z","published":"2026-10-22T19:13:59.314Z","modified":"2026-10-29T12:16:18.355Z"}],"publishers":[{"name":"VulnCheck","role":"CNA","organizationId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","modified":"2026-10-22T19:13:59.314Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-10-29T12:16:18.355Z"}],"references":[{"url":"https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-hgjw-h833-99q9","tags":["vendor-advisory"],"source":"VulnCheck"},{"url":"https://www.vulncheck.com/advisories/wasmtime-before-24.0.12-25.0.0-before-36.0.13-37.0.0-before-46.0.2-and-47.0.0-before-47.0.3-cross-engine-type-confusion","tags":["third-party-advisory"],"source":"VulnCheck"}],"weaknesses":[{"id":"CWE-787","description":"Out-of-bounds Write","source":"VulnCheck"}],"applicability":[{"source":"VulnCheck","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bytecodealliance:wasmtime:*:*:*:*:*:*:*:*","versionEndExcluding":"24.0.12"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytecodealliance:wasmtime:*:*:*:*:*:*:*:*","versionStartIncluding":"25.0.0","versionEndExcluding":"36.0.13"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytecodealliance:wasmtime:*:*:*:*:*:*:*:*","versionStartIncluding":"37.0.0","versionEndExcluding":"46.0.2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytecodealliance:wasmtime:*:*:*:*:*:*:*:*","versionStartIncluding":"47.0.0","versionEndExcluding":"47.0.3"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-10-29T12:13:07.262468Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Wasmtime before 24.0.12, 25.0.0 before 36.0.13, 37.0.0 before 46.0.2, and 47.0.0 before 47.0.3 Cross-Engine Type Confusion","titleSource":"VulnCheck","descriptionSource":"VulnCheck","description":"Wasmtime before 24.0.12, 25.0.0 before 36.0.13, 37.0.0 before 46.0.2, and 47.0.0 before 47.0.3 contains a type confusion vulnerability because several Store APIs fail to validate that objects belong to the Store's Engine. Embedders mixing objects between Engines via Instance::new, StructRefPre::new, or Tag::new can trigger trampoline signature mismatches causing out-of-bounds stack writes, GC heap corruption, or panics.","score":3.8,"severity":"low","published":"2026-10-22T19:13:59.314Z","modified":"2026-10-29T12:16:18.355Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"bytecodealliance","name":"wasmtime","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"24.0.12","versionType":"semver"},{"version":"24.0.12","status":"unaffected","versionType":"semver"},{"version":"25.0.0","status":"affected","lessThan":"36.0.13","versionType":"semver"},{"version":"36.0.13","status":"unaffected","versionType":"semver"},{"version":"37.0.0","status":"affected","lessThan":"46.0.2","versionType":"semver"},{"version":"46.0.2","status":"unaffected","versionType":"semver"},{"version":"47.0.0","status":"affected","lessThan":"47.0.3","versionType":"semver"},{"version":"47.0.3","status":"unaffected","versionType":"semver"}],"defaultStatus":"unaffected","packageURL":"pkg:cargo/wasmtime","packageIdentity":{"ecosystem":"crates.io","name":"wasmtime"},"cpes":[],"source":"VulnCheck","url":"https://www.cve.org/CVERecord?id=CVE-2026-115393"}],"remediation":[],"references":["https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-hgjw-h833-99q9","https://www.vulncheck.com/advisories/wasmtime-before-24.0.12-25.0.0-before-36.0.13-37.0.0-before-46.0.2-and-47.0.0-before-47.0.3-cross-engine-type-confusion"],"sources":[{"name":"CVE","id":"CVE-2026-115393","modified":"2026-10-29T12:16:18.355Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-115393"}],"assessments":[{"source":"VulnCheck","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","score":1},{"source":"VulnCheck","vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L","score":3.8}],"sourceAffected":[],"observedAt":"2026-10-29T14:34:24.379Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T14:10:32.801Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-10-29T12:30:35.890Z","attemptedAt":"2026-10-29T12:30:35.890Z"},{"source":"GHSA","status":"available","checkedAt":"2026-10-29T12:30:36.201Z","attemptedAt":"2026-10-29T12:30:36.201Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-29T12:30:36.516Z","attemptedAt":"2026-10-29T12:30:36.516Z"},{"source":"EPSS","status":"available","checkedAt":"2026-10-29T12:30:35.902Z","attemptedAt":"2026-10-29T12:30:35.902Z"}],"evidence":[{"source":"FIRST EPSS","id":"CVE-2026-115393","url":"https://www.first.org/epss/","probability":0.00092,"percentile":0.00492,"date":"2026-10-28","checkedAt":"2026-10-29T12:30:35.902Z"},{"source":"NVD","id":"CVE-2026-115393","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115393","modified":"2026-10-22T19:17:47.150","score":1,"vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","checkedAt":"2026-10-29T12:30:35.890Z"},{"source":"NVD","id":"CVE-2026-115393","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115393","modified":"2026-10-22T19:17:47.150","score":3.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L","checkedAt":"2026-10-29T12:30:35.890Z"},{"source":"GitHub Advisory Database","id":"GHSA-hm3j-7f84-9x3r","url":"https://github.com/advisories/GHSA-hm3j-7f84-9x3r","modified":"2026-10-22T21:32:53Z","score":3.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L","checkedAt":"2026-10-29T12:30:36.201Z"},{"source":"ENISA EUVD","id":"EUVD-2026-108327","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-108327","modified":"Oct 22, 2026, 7:13:59 PM","score":1,"vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","checkedAt":"2026-10-29T12:30:36.516Z"}],"aiSummary":{"text":"Wasmtime versions before 24.0.12, 25.0.0 before 36.0.13, 37.0.0 before 46.0.2, and 47.0.0 before 47.0.3 contain a type confusion vulnerability. This may cause out-of-bounds stack writes, GC heap corruption, or panics when mixing objects between Engines.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T09:24:48.440Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-115393"}]}}