CVE-2026-34945— wasmtime 安全漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2026-34945の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Wasmtime leaks host data with 64-bit tables and Winch
ソース: NVD (National Vulnerability Database)
脆弱性説明
Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's Winch compiler contains a bug where a 64-bit table, part of the memory64 proposal of WebAssembly, incorrectly translated the table.size instruction. This bug could lead to disclosing data on the host's stack to WebAssembly guests. The host's stack can possibly contain sensitive data related to other host-originating operations which is not intended to be disclosed to guests. This bug specifically arose from a mistake where the return value of table.size was statically typed as a 32-bit integer, as opposed to consulting the table's index type to see how large the returned register could be. When combined with details about Wnich's ABI, such as multi-value returns, this can be combined to read stack data from the host, within a guest. This vulnerability is fixed in 36.0.7, 42.0.2, and 43.0.1.
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
数值类型间的不正确转换
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
wasmtime 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
wasmtime是Bytecode Alliance开源的一个轻量级WebAssembly运行时。 Wasmtime 25.0.0至36.0.7之前版本、42.0.2之前版本和43.0.1之前版本存在安全漏洞，该漏洞源于Winch编译器错误地翻译了作为WebAssembly memory64提案一部分的64位表的table.size指令，可能导致将主机堆栈上的数据泄露给WebAssembly访客，这些数据可能包含与其他主机操作相关的敏感信息。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| bytecodealliance | wasmtime | >= 25.0.0, < 36.0.7 | - |
II. CVE-2026-34945の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2026-34945のインテリジェンス情報
お願いします ログイン より多くのインテリジェンス情報を見る
Same Patch Batch · bytecodealliance · 2026-04-09 · 12 CVEs total
| CVE-2026-35195 | Wasmtime has an out-of-bounds write or crash when transcoding component model strings | |
| CVE-2026-35186 | Wasmtime has an improperly masked return value from `table.grow` with Winch compiler backe | |
| CVE-2026-34983 | Wasmtime has a use-after-free bug after cloning `wasmtime::Linker` | |
| CVE-2026-34941 | Wasmtime has a Heap OOB read in component model UTF-16 to latin1+utf16 string transcoding | |
| CVE-2026-34942 | Wasmtime panics when transcoding misaligned utf-16 strings | |
| CVE-2026-34988 | Wasmtime leaks data between pooling allocator instances | |
| CVE-2026-34971 | Wasmtime miscompiled guest heap access enables sandbox escape on aarch64 Cranelift | |
| CVE-2026-34946 | Wasmtime's host panics when Winch compiler executes `table.fill` | |
| CVE-2026-34944 | Wasmtime segfault or unused out-of-sandbox load with `f64x2.splat` operator on x86-64 | |
| CVE-2026-34987 | Wasmtime with Winch compiler backend on aarch64 may allow a sandbox-escaping memory access | |
| CVE-2026-34943 | Wasmtime panics when lifting `flags` component value |
IV. 関連脆弱性
同じ製品: wasmtime
- CVE-2026-35195
Wasmtime has an out-of-bounds write or crash when transcodin - CVE-2026-35186
Wasmtime has an improperly masked return value from `table.g - CVE-2026-34988
Wasmtime leaks data between pooling allocator instances - CVE-2026-34987
Wasmtime with Winch compiler backend on aarch64 may allow a - CVE-2026-34983
Wasmtime has a use-after-free bug after cloning `wasmtime::L
同じベンダー: bytecodealliance
- CVE-2026-35195
Wasmtime has an out-of-bounds write or crash when transcodin - CVE-2026-35186
Wasmtime has an improperly masked return value from `table.g - CVE-2026-34988
Wasmtime leaks data between pooling allocator instances - CVE-2026-34987
Wasmtime with Winch compiler backend on aarch64 may allow a - CVE-2026-34983
Wasmtime has a use-after-free bug after cloning `wasmtime::L
V. CVE-2026-34945へのコメント
まだコメントはありません