PT-2025-48092 · Wamr+1 · Wamr+1

Published 2025-11-25 · Updated 2025-12-01 · CVE-2025-64713

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WebAssembly Micro Runtime (WAMR) versions prior to 2.4.4

Description WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. An out-of-bounds array access issue exists in WAMR's fast interpreter mode during WASM bytecode loading. Specifically, when the frame ref bottom and frame offset bottom arrays are at capacity and a GET GLOBAL(I32) opcode is encountered, frame ref bottom is expanded, but frame offset bottom may not be. If an if opcode that triggers preserve local for block immediately follows, the function uses stack cell num as the upper bound when traversing arrays, leading to out-of-bounds access to frame offset bottom because it wasn't expanded to match the increased stack cell num.

Recommendations Update WebAssembly Micro Runtime (WAMR) to version 2.4.4 or later.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2025-64713

GHSA-GVX3-GG3X-RJCX

Affected Products

Wamr

Webassembly Micro Runtime

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/64xxx/CVE-2025-64713.json · Exploit
• https://github.com/bytecodealliance/wasm-micro-runtime/security/advisories/GHSA-gvx3-gg3x-rjcx · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-64713 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-64713 · Security Note
• https://github.com/bytecodealliance/wasm-micro-runtime/releases/tag/WAMR-2.4.4 · Note
• https://t.me/cveNotify/144030 · Telegram Post
• https://t.me/cveNotify/144432 · Telegram Post
• https://t.me/CVEtracker/38232 · Telegram Post
• https://twitter.com/CVEnew/status/1993452591322108099 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1993591324402962618 · Twitter Post