CVE 4.7 MEDIUM

WebAssembly Micro Runtime vulnerable to a segmentation fault in v128.store instruction_CVE-2025-64704

4.7 / 10
MEDIUM
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

Description

WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. Prior to version 2.4.4, WAMR is susceptible to a segmentation fault in v128.store instruction. This issue has been patched in version 2.4.4.

Basic Information

ID CVE-2025-64704
Source GitHub_M
Published Nov 25, 2025 at 22:06

Affected Product

Vendor bytecodealliance
Product wasm-micro-runtime
Version < 2.4.4
Affected Versions bytecodealliance wasm-micro-runtime < 2.4.4

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.