CVE-2026-90648 | wabt up to 1.0.41 Funcref Table wasm-rt-impl-tableops.inc wasm_rt_allocate_funcref_table input validation (EUVD-2026-76923)

A vulnerability was found in wabt up to 1.0.41. It has been rated as critical. This affects the function wasm_rt_allocate_funcref_table of the file wasm2c/wasm-rt-impl-tableops.inc of the component Funcref Table. This manipulation causes improper input validation. This vulnerability is tracked as CVE-2026-90648. The attack is possible to be carried out remotely. No exploit exists.