CVE-2025-62711

Name of the Vulnerable Software and Affected Versions Wasmtime versions 38.0.0 through 38.0.2

Description Wasmtime is a runtime for WebAssembly. Versions from 38.0.0 through 38.0.2 contain a flaw in the implementation of component-model related host-to-wasm trampolines. Specifically, a carefully crafted component, when called in a specific way, can cause the host to crash with a segmentation fault or assertion failure.

Recommendations Update to version 38.0.3 or later.