CVE-2025-64704WebAssembly Micro Runtime vulnerable to a segmentation fault in v128.store instruction

Descripción

WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. Prior to version 2.4.4, WAMR is susceptible to a segmentation fault in v128.store instruction. This issue has been patched in version 2.4.4.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• https://github.com/bytecodealliance/wasm-micro-runtime/security/advisories/GHSA-2f2p-wf5w-82qr ExploitVendor Advisory
• https://github.com/bytecodealliance/wasm-micro-runtime/releases/tag/WAMR-2.4.4 Release Notes