This is an older version. The current version is 50.0.1. Wasmtime 50.0.1 · Released:
Installer files 43.0.1
| Architecture | Type | Scope | File size | Download | SHA256 |
|---|---|---|---|---|---|
| 64-bit | ZIP → Portable · en-US | — | — | github.com | VirusTotal |
Link and SHA256 come from the Windows Package Manager community manifest. Compare the hash of the downloaded file before running it.
Release notes
43.0.1
Released 2026-04-09.
Fixed
- Miscompiled guest heap access enables sandbox escape on aarch64 Cranelift.
GHSA-jhxm-h53p-jm7w
- Wasmtime with Winch compiler backend may allow a sandbox-escaping memory
access.
GHSA-xx5w-cvp6-jv83
- Out-of-bounds write or crash when transcoding component model strings.
GHSA-394w-hwhg-8vgm
- Host panic when Winch compiler executes table.fill.
GHSA-q49f-xg75-m9xw
- Wasmtime segfault or unused out-of-sandbox load with f64x2.splat operator
on x86-64.
GHSA-qqfj-4vcm-26hv
- Improperly masked return value from table.grow with Winch compiler backend.
GHSA-f984-pcp8-v2p7
- Panic when transcoding misaligned utf-16 strings.
GHSA-jxhv-7h78-9775
- Panic when lifting flags component value.
GHSA-m758-wjhj-p3jq
- Heap OOB read in component model UTF-16 to latin1+utf16 string transcoding.
GHSA-hx6p-xpx3-jvvv
- Use-after-free bug after cloning wasmtime::Linker.
GHSA-hfr4-7c6c-48w2
- Data leakage between pooling allocator instances.
GHSA-6wgr-89rj-399p
- Host data leakage with 64-bit tables and Winch.
GHSA-m9w2-8782-2946https://github.com/bytecodealliance/wasmtime/releases/tag/v43.0.1
