CVE-2026-115384

A flaw was found in Wasmtime. A malicious guest can trigger a stack-based buffer overflow by supplying asynchronous callback functions with mismatched result types. This vulnerability allows the guest to overwrite host stack memory, enabling them to escape the WebAssembly Wasm sandbox, potentiall...