The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve     32-bit platforms, aka a table flip attack. It does not check the return value of calloc() in     wasm_rt_allocate_funcref_table() (wasm2c/wasm-rt-impl-tableops.inc). When the funcref table allocation     fails, table->data is left NULL while table->size keeps the guest-declared element count; thus, bounds     checks still pass and table element accesses resolve to absolute memory addresses (i *     sizeof(wasm_rt_funcref_t)). This gives arbitrary read and write of host process memory and - via     table.get, table.set, and call_indirect - arbitrary code execution, defeating the isolation that wasm2c     exists to provide (a full sandbox escape). wasm2c is used as an in-process sandboxing boundary by RLBox     and WasmBoxC, including in Firefox, which compiles the Graphite, Hunspell, Ogg, Expat, and Woff2 libraries     via wasm2c to contain untrusted font, media, and XML input. Therefore, sandboxing in these applications is     potentially affected. Exploitation requires the funcref table allocation to fail, for example under an     address-space limit (RLIMIT_AS), on 32-bit hosts, with vm.overcommit_memory=2, or under memory pressure.
    On 64-bit Linux with default overcommit the allocation succeeds and the defect is not triggered. The     wasm2c memory allocator aborts on calloc failure in the same runtime; the table allocator lacks this abort     behavior. This was introduced in commit ab9e0b55 (PR #813). (CVE-2026-90648)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-90648

high Nessus Plugin ID 345464

Version 1.2

Version 1.1

Version 1.2 Sep 14, 2026, 6:39 PM CVSS metrics ("CVSSv2 score" set to 9.0) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:P/I:C/A:P") Detection (updated detection logic) Plugin metadata Plugin Feed: 202609141839
Version 1.1 Sep 13, 2026, 2:56 PM New Plugin Feed: 202609131456