Medium · 4.7 CVE-2025-64704 EUVD-2025-199656

WebAssembly Micro Runtime vulnerable to a segmentation fault in v128.store instruction

Published Nov 25, 2025 · Updated Nov 26, 2025 · Assigned by GitHub_M

Vendor: bytecodealliance Product: wasm-micro-runtime

Description

WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. Prior to version 2.4.4, WAMR is susceptible to a segmentation fault in v128.store instruction. This issue has been patched in version 2.4.4.

Affected products

Vendor	Product	Affected	Fixed
bytecodealliance	wasm-micro-runtime	< 2.4.4	—

References

https://github.com/bytecodealliance/wasm-micro-runtime/security/advisories/GHSA-2f2p-wf5w-82qr
https://github.com/bytecodealliance/wasm-micro-runtime/releases/tag/WAMR-2.4.4