VYPR
← All advisories
High severity7.5OSV Advisory· Published Dec 30, 2025· Updated Jun 17, 2026

CVE-2025-69261

CVE-2025-69261

Description

WasmEdge is a WebAssembly runtime. Prior to version 0.16.0-alpha.3, a multiplication in WasmEdge/include/runtime/instance/memory.h can wrap, causing checkAccessBound() to incorrectly allow the access. This leads to a segmentation fault. Version 0.16.0-alpha.3 contains a patch for the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Wasmedge/WasmedgeOSV2 versions
    0.1.0, 0.10.0, 0.10.0-alpha.1, …+ 1 more
    • (no CPE)range: 0.1.0, 0.10.0, 0.10.0-alpha.1, …
    • (no CPE)range: <0.16.0-alpha.3
  • Linux Foundation/Wasmedge3 versions
    cpe:2.3:a:linuxfoundation:wasmedge:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:linuxfoundation:wasmedge:*:*:*:*:*:*:*:*range: <0.16.0
    • cpe:2.3:a:linuxfoundation:wasmedge:0.16.0:alpha1:*:*:*:*:*:*
    • cpe:2.3:a:linuxfoundation:wasmedge:0.16.0:alpha2:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.