36.0.7
Released 2026-04-09.
Fixed
-
Miscompiled guest heap access enables sandbox escape on aarch64 Cranelift.
GHSA-jhxm-h53p-jm7w -
Wasmtime with Winch compiler backend may allow a sandbox-escaping memory
access.
GHSA-xx5w-cvp6-jv83 -
Out-of-bounds write or crash when transcoding component model strings.
GHSA-394w-hwhg-8vgm -
Host panic when Winch compiler executes
table.fill.
GHSA-q49f-xg75-m9xw -
Wasmtime segfault or unused out-of-sandbox load with
f64x2.splatoperator
on x86-64.
GHSA-qqfj-4vcm-26hv -
Improperly masked return value from
table.growwith Winch compiler backend.
GHSA-f984-pcp8-v2p7 -
Panic when transcoding misaligned utf-16 strings.
GHSA-jxhv-7h78-9775 -
Panic when lifting
flagscomponent value.
GHSA-m758-wjhj-p3jq -
Heap OOB read in component model UTF-16 to latin1+utf16 string transcoding.
GHSA-hx6p-xpx3-jvvv -
Data leakage between pooling allocator instances.
GHSA-6wgr-89rj-399p -
Host data leakage with 64-bit tables and Winch.
GHSA-m9w2-8782-2946