CVE-2025-64704

Description

WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. Prior to version 2.4.4, WAMR is susceptible to a segmentation fault in v128.store instruction. This issue has been patched in version 2.4.4.

CVSS breakdown

CVSS 3.1

Attack Vector

Local

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Affected products

bytecodealliance / wasm-micro-runtime< 2.4.4 – < 2.4.4

References

VENDOR_ADVISORYhttps://github.com/bytecodealliance/wasm-micro-runtime/security/advisories/GHSA-2f2p-wf5w-82qr
PATCHhttps://github.com/bytecodealliance/wasm-micro-runtime/releases/tag/WAMR-2.4.4