{"id":"CVE-2026-24116","aliases":["RUSTSEC-2026-0006","GHSA-vc8c-j3xm-xj73"],"title":"Wasmtime segfault or unused out-of-sandbox load with `f64.copysign` operator on x86-64","summary":"Wasmtime segfault or unused out-of-sandbox load with `f64.copysign` operator on x86-64","severity":"none","vendor":"wasmtime","product":"wasmtime","ecosystem":"rust","affected":["wasmtime >= 41.0.0, < 41.0.1"],"patched":["wasmtime 41.0.1"],"published":"2026-01-26","updated":"2026-10-12","sourceUpdated":"2026-10-12T18:00:13.559880161Z","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/RUSTSEC-2026-0006","references":[{"url":"https://crates.io/crates/wasmtime"},{"url":"https://rustsec.org/advisories/RUSTSEC-2026-0006.html"},{"url":"https://github.com/bytecodealliance/wasmtime/commit/728fa07184f8da2a046f48ef9b61f869dce133a6"}],"tags":["osv","rust"],"epss":0.00249,"epssPercentile":0.15,"ingestedAt":"2026-10-13T11:45:30.183Z","slug":"CVE-2026-24116","body":"## Overview\n\nThis is an entry in the RustSec database for the Wasmtime security advisory\nlocated at\nhttps://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-vc8c-j3xm-xj73\nFor more information see the GitHub-hosted security advisory.\n\n## Affected packages\n\n- `wasmtime >= 41.0.0, < 41.0.1`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `wasmtime 41.0.1`","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}