CVE-2025-64704
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-11-25

Last updated on: 2025-12-03

Assigner: GitHub, Inc.

Description
WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. Prior to version 2.4.4, WAMR is susceptible to a segmentation fault in v128.store instruction. This issue has been patched in version 2.4.4.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-11-25
Last Modified
2025-12-03
Generated
2026-06-16
AI Q&A
2025-11-26
EPSS Evaluated
2026-06-15
NVD
CVE-2025-64704
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
bytecodealliance webassembly_micro_runtime to 2.4.4 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-754 The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is a segmentation fault issue in the WebAssembly Micro Runtime (WAMR) related to the v128.store instruction. It occurs in versions prior to 2.4.4 and can cause the runtime to crash or behave unexpectedly. The issue has been fixed in version 2.4.4.

Impact Analysis

The vulnerability can cause a segmentation fault, leading to a crash or denial of service in applications using affected versions of WAMR. This could disrupt normal operations or availability of services relying on this runtime.

Mitigation Strategies

Upgrade WebAssembly Micro Runtime (WAMR) to version 2.4.4 or later, as this version contains the patch for the segmentation fault vulnerability in the v128.store instruction.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-64704. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart