CVE-2025-64704 | THREATINT

Description

WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. Prior to version 2.4.4, WAMR is susceptible to a segmentation fault in v128.store instruction. This issue has been patched in version 2.4.4.

PUBLISHED Reserved 2025-11-10 | Published 2025-11-25 | Updated 2025-11-26 | Assigner GitHub_M

MEDIUM: 4.7CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

Problem types

CWE-754: Improper Check for Unusual or Exceptional Conditions

Product status

< 2.4.4

affected

References

github.com/...untime/security/advisories/GHSA-2f2p-wf5w-82qr exploit

github.com/...untime/security/advisories/GHSA-2f2p-wf5w-82qr

github.com/...nce/wasm-micro-runtime/releases/tag/WAMR-2.4.4

cve.org (CVE-2025-64704)

nvd.nist.gov (CVE-2025-64704)

Download JSON