CVE-2025-64704
BaseFortify
Publication date: 2025-11-25
Last updated on: 2025-12-03
Assigner: GitHub, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| bytecodealliance | webassembly_micro_runtime | to 2.4.4 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-754 | The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a segmentation fault issue in the WebAssembly Micro Runtime (WAMR) related to the v128.store instruction. It occurs in versions prior to 2.4.4 and can cause the runtime to crash or behave unexpectedly. The issue has been fixed in version 2.4.4.
How can this vulnerability impact me? :
The vulnerability can cause a segmentation fault, leading to a crash or denial of service in applications using affected versions of WAMR. This could disrupt normal operations or availability of services relying on this runtime.
What immediate steps should I take to mitigate this vulnerability?
Upgrade WebAssembly Micro Runtime (WAMR) to version 2.4.4 or later, as this version contains the patch for the segmentation fault vulnerability in the v128.store instruction.