CVE-2025-64704

WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. Prior to version 2.4.4, WAMR is susceptible to a segmentation fault in v128.store instruction. This issue has been patched in version 2.4.4.

Score

CVSS 3.1 5.5 Medium

Status

Analyzed - security-advisories@github.com

Published

2025-11-25

Last modified

2026-10-18

Weaknesses

CWE-754

Affected products

• Wasm-micro-runtime (Bytecodealliance)
• Webassembly Micro Runtime (Bytecodealliance)

References

• https://github.com/bytecodealliance/wasm-micro-runtime/security/advisories/GHSA-2f2p-wf5w-82qr
• https://github.com/bytecodealliance/wasm-micro-runtime/releases/tag/WAMR-2.4.4