RUSTSEC-2026-0420: wasip3 UDP `send` can deliver a datagram to an address only allowed for receiving

Q: What does an attacker need to exploit this issue?

The attacker needs low-privileged access and network reachability. Exploitation has low attack complexity and does not require user interaction.

Q: What is the potential security impact?

The advisory rates the issue as medium severity with a 6.4 score. It may result in low confidentiality and integrity impact, with no availability impact indicated; the scope is changed.

Published Oct 29, 2026

Updated

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-hmmr-87qq-258j For more information see the GitHub-hosted security advisory.

Affected Software

3 affected componentsFixes available

rust/wasmtime-wasi>=48.0.0<48.0.8

48.0.8

rust/wasmtime-wasi>=49.0.0<49.0.5

49.0.5

rust/wasmtime-wasi>=50.0.0<50.0.1

50.0.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade rust/wasmtime-wasi to a version that resolves this vulnerability.
Fixed in 48.0.8
Upgrade
Upgrade rust/wasmtime-wasi to a version that resolves this vulnerability.
Fixed in 49.0.5
Upgrade
Upgrade rust/wasmtime-wasi to a version that resolves this vulnerability.
Fixed in 50.0.1

Event History

Oct 29, 2026

Advisory Published

via OSV·12:00 PM

Data Sourced

via OSV·12:00 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What does an attacker need to exploit this issue?

The attacker needs low-privileged access and network reachability. Exploitation has low attack complexity and does not require user interaction.

What is the potential security impact?

The advisory rates the issue as medium severity with a 6.4 score. It may result in low confidentiality and integrity impact, with no availability impact indicated; the scope is changed.

RUSTSEC-2026-0420: wasip3 UDP `send` can deliver a datagram to an address only allowed for receiving

Affected Software

Remediation

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the potential security impact?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the potential security impact?