{"id":"CVE-2026-54913","kind":"vulnerability","aliases":["CVE-2026-54913"],"related":[],"title":"WAMR: crafted Wasm module leaks uninitialized host stack bytes to guest","description":"WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. Prior to 2.4.5, load_init_expr in core/iwasm/interpreter/wasm_loader.c accepts a non-reference heap-type byte for ref.null when WASM_ENABLE_GC=0, while the local WASMValue cur_value union is not zero-initialized and setting ref_index writes only part of it. A crafted module can declare an i64, f64, or v128 global initialized through the invalid ref.null form, causing push_const_expr_stack and the later global initialization path to copy uninitialized host-stack bytes into a value readable by the guest. The classic and fast interpreters are affected in the default no-GC configuration; the GC-enabled path validates heap types. The disclosure is four bytes for i64 or f64 globals and up to twelve bytes for each v128 global. This issue is fixed in version 2.4.5.","summary":"WebAssembly Micro Runtime (WAMR) before 2.4.5 accepts an invalid ref.null heap-type byte in global initializers when GC is disabled, so uninitialized host-stack memory is copied into a guest-readable global. A crafted module can read leftover host memory, up to twelve bytes per v128 global.","severity":"medium","cvss":6.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["embedded-wasm","runtime","wamr","webassembly"],"not_affected_if":["gc-enabled","trusted-modules-only"],"how_to_check":"- Check the WAMR version in use, for example with `iwasm --version` or the version of the embedded library, and see whether it is below `2.4.5`.\n- Check whether the build sets `WASM_ENABLE_GC=0`, the default no-GC configuration.\n- Check whether the runtime loads untrusted or user-supplied Wasm modules.","fix":"- WAMR: upgrade to `2.4.5`","status":"open","published_at":"2026-11-05T18:17:08+00:00","first_seen_at":"2026-11-05T18:40:09+00:00","triaged_at":"2026-11-05T18:40:37+00:00","updated_at":"2026-11-05T18:40:37+00:00","category":"runtime","confidence":0.7,"triage":{"at":"2026-11-05T18:40:37Z","model":"claude-haiku-5-5","output":{"fix":"- WAMR: upgrade to `2.4.5`","reach":"unknown","title":"WAMR: crafted Wasm module leaks uninitialized host stack bytes to guest","impact":"low","summary":"WebAssembly Micro Runtime (WAMR) before 2.4.5 accepts an invalid ref.null heap-type byte in global initializers when GC is disabled, so uninitialized host-stack memory is copied into a guest-readable global. A crafted module can read leftover host memory, up to twelve bytes per v128 global.","audience":"developers","category":"runtime","nicknames":[],"who_cares":["wamr","webassembly","embedded-wasm"],"confidence":0.7,"fix_status":"available","needs_auth":"no","worst_case":"guest code reads uninitialized host stack memory","analyst_note":"","how_to_check":"- Check the WAMR version in use, for example with `iwasm --version` or the version of the embedded library, and see whether it is below `2.4.5`.\n- Check whether the build sets `WASM_ENABLE_GC=0`, the default no-GC configuration.\n- Check whether the runtime loads untrusted or user-supplied Wasm modules.","plain_action":"","needs_analyst":false,"not_affected_if":["gc-enabled","trusted-modules-only"],"who_is_affected":"Teams that embed or run WAMR with the interpreter and GC disabled, especially when they load Wasm modules from untrusted sources. The GC-enabled path validates heap types and is not affected. Teams that only run trusted modules or use a different runtime can treat this as lower priority.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"medium"},"cost_usd":0.000747,"input_tokens":4506,"output_tokens":593,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-54913':14A,17A '0':108C '2.4.5':29B,87C,219C 'accept':30B,93C 'affect':178C 'byte':9A,37B,70B,101C,164C,198C,208C 'caus':147C 'classic':173C 'configur':185C 'const':149C 'copi':52B,159C 'core/iwasm/interpreter/wasm_loader.c':92C 'craft':2A,60B,131C 'cur':113C 'cve':12A,15A 'declar':134C 'default':181C 'disabl':44B 'disclosur':195C 'embed':19B 'embedded-wasm':18B 'enabl':106C,189C 'expr':90C,150C 'f64':137C,202C 'fast':175C 'fix':216C 'form':146C 'four':197C 'gc':42B,107C,184C,188C 'gc-enabl':187C 'global':39B,58B,73B,140C,155C,203C,212C 'guest':11A,56B,171C 'guest-read':55B 'heap':35B,99C,192C 'heap-typ':34B,98C 'host':7A,48B,65B,162C 'host-stack':47B,161C 'i64':136C,200C 'index':124C 'init':89C 'initi':40B,120C,141C,156C 'interpret':176C 'invalid':32B,144C 'issu':214C 'later':154C 'leak':5A 'leftov':64B 'lightweight':80C 'load':88C 'local':111C 'memori':50B,66B 'micro':25B,75C 'modul':4A,61B,132C 'no-gc':182C 'non':96C 'non-refer':95C 'part':127C 'path':157C,190C 'per':71B 'prior':85C 'push':148C 'read':63B 'readabl':57B,168C 'ref':123C 'ref.null':33B,103C,145C 'refer':97C 'runtim':21B,26B,76C,84C 'set':122C 'stack':8A,49B,151C,163C 'standalon':81C 'twelv':69B,207C 'type':36B,100C,193C 'uniniti':6A,46B,160C 'union':115C 'v128':72B,139C,211C 'valid':191C 'valu':114C,167C 'version':218C 'wamr':1A,22B,27B,77C 'wasm':3A,20B,83C,105C 'wasmvalu':112C 'webassembl':23B,24B,74C,82C 'write':125C 'zero':119C 'zero-initi':118C","nicknames":[],"mitigations":[],"who_affected":"Teams that embed or run WAMR with the interpreter and GC disabled, especially when they load Wasm modules from untrusted sources. The GC-enabled path validates heap types and is not affected. Teams that only run trusted modules or use a different runtime can treat this as lower priority.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"developers","plain_action":null,"pkeys":[],"ptokens":[],"labels":["embeddedwasm","medium","runtime","wamr","webassembly"],"campaign_type":null,"first_public_at":"2026-08-04T07:24:40+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"security-advisories@github.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-54913","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54913","severity":null,"published_at":"2026-11-05T18:17:08+00:00","modified_at":"2026-11-05T18:17:08+00:00","first_seen_at":"2026-11-05T18:40:09+00:00","fetched_at":"2026-11-05T18:40:09+00:00","note":null}],"documents":[{"id":78694,"url":"https://github.com/wasm-micro-runtime/wasm-micro-runtime/commit/c313279c548c6a93f55eb97455cab8696e39f6c1","title":"Patch: github.com","kind":"other","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Patch: github.com"},{"id":78695,"url":"https://github.com/wasm-micro-runtime/wasm-micro-runtime/commit/e571797fbdf498d9ac4edb495205ea0f01370091","title":"Patch: github.com","kind":"other","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Patch: github.com"},{"id":78692,"url":"https://github.com/wasm-micro-runtime/wasm-micro-runtime/releases/tag/WAMR-2.4.5","title":"Release notes: github.com","kind":"release","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Release notes: github.com"},{"id":78697,"url":"https://github.com/wasm-micro-runtime/wasm-micro-runtime/security/advisories/GHSA-frwm-5hpr-2hq2","title":"Vendor advisory: github.com","kind":"vendor","source":"nvd","publisher":"vendor","text":null,"published_at":"2026-08-04T07:24:40+00:00","relation":"advisory","confidence":null,"note":"Vendor advisory: github.com"}],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}