Bytecode Alliance · Wasm-Micro-Runtime · CVE-2024-25431
**Name of the Vulnerable Software and Affected Versions**
bytecodealliance wasm-micro-runtime versions before v.b3f728c
**Description**
The issue allows a remote attacker to escalate privileges via a crafted file to the `check was abi compatibility` function.
**Recommendations**
For versions before v.b3f728c, update to a version that includes the fix from commit 06df58f to resolve the issue.
As a temporary workaround, consider restricting access to the `check was abi compatibility` function until a patch is available.