CVE-2026-115391

The Wasmtime runtime versions 46.0.0 before 46.0.3 and 47.0.0 before 47.0.4 are vulnerable to an uncontrolled resource allocation issue within the WASIp3 implementation. The root cause is that the host buffers guest-specified-length writes without any upper limit. A malicious guest can provide la...