CVE-2026-54914

The WebAssembly Micro Runtime (WAMR) is vulnerable to a heap-buffer-overflow in its WASI poll_oneoff implementation prior to version 2.4.5 . The root cause is that wasi_poll_oneoff validates the output pointer for only one wasi_event_t, while the underlying wasmtime_ssp_poll_oneoff can write as m...