Neutron, our AI engine, scored 97.1% on UC Berkeley's CyberGym benchmark. Learn more

Tag

#webassembly

1 articles

Deep Dive

Wasmtime Sandbox Escape via Compiler Miscompilation (CVE-2026-115889)

CVE-2026-115889 is a Critical Wasmtime sandbox escape: Cranelift packs indices into 24-bit fields that a crafted module overflows. Fixed in 36.0.19 and 43.0.0.

Ostorlab Team
Oct 24, 2026