GHSA-3982-jqvv-277m: Typed functions with `i31` or `nullref` arguments may panic due to insufficient type-check

Q: What access would an attacker need to exploit this issue?

The attack vector is adjacent network access. Exploitation also requires high privileges and user interaction.

Q: What is the expected impact of successful exploitation?

The reported impact is limited to availability, with low availability impact. No confidentiality or integrity impact is reported.

Q: How difficult is exploitation expected to be?

The advisory rates attack complexity as high, indicating exploitation depends on conditions beyond the required access, privileges, and user interaction.

Published Oct 29, 2026

Updated

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-3982-jqvv-277m For more information see the GitHub-hosted security advisory.

Affected Software

3 affected componentsFixes available

rust/wasmtime>=47.0.0<48.0.8

48.0.8

rust/wasmtime>=49.0.0<49.0.5

49.0.5

rust/wasmtime>=50.0.0<50.0.1

50.0.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade rust/wasmtime to a version that resolves this vulnerability.
Fixed in 48.0.8
Upgrade
Upgrade rust/wasmtime to a version that resolves this vulnerability.
Fixed in 49.0.5
Upgrade
Upgrade rust/wasmtime to a version that resolves this vulnerability.
Fixed in 50.0.1

Event History

Oct 29, 2026

Advisory Published

via OSV·12:00 PM

Data Sourced

via OSV·12:00 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What access would an attacker need to exploit this issue?

The attack vector is adjacent network access. Exploitation also requires high privileges and user interaction.

What is the expected impact of successful exploitation?

The reported impact is limited to availability, with low availability impact. No confidentiality or integrity impact is reported.

How difficult is exploitation expected to be?

The advisory rates attack complexity as high, indicating exploitation depends on conditions beyond the required access, privileges, and user interaction.

GHSA-3982-jqvv-277m: Typed functions with `i31` or `nullref` arguments may panic due to insufficient type-check

Affected Software

Remediation

Event History

Frequently Asked Questions

What access would an attacker need to exploit this issue?

What is the expected impact of successful exploitation?

How difficult is exploitation expected to be?

Company

Resources

Contact

Frequently Asked Questions

What access would an attacker need to exploit this issue?

What is the expected impact of successful exploitation?

How difficult is exploitation expected to be?