CERT24CVE-2026-58592 — Web-reachable code execution in Ladybird via a dangling FunctionType reference in WebAssembly ESM integrationLoading data…
CERT24Threat Observatory
Period

CVE-2026-58592 — Web-reachable code execution in Ladybird via a dangling FunctionType reference in WebAssembly ESM integration

Ladybird contains a memory-safety flaw involving a dangling reference in its WebAssembly ESM-integration module loader. A web page can chain the flaw into code execution in the WebContent process. The issue was verified as reachable from HTML content without instrumentation or source modification.

← Back to intelligence

CVE-2026-58592 — Web-reachable code execution in Ladybird via a dangling FunctionType reference in WebAssembly ESM integration

Ladybird contains a memory-safety flaw involving a dangling reference in its WebAssembly ESM-integration module loader. A web page can chain the flaw into code execution in the WebContent process. The issue was verified as reachable from HTML content without instrumentation or source modification.