Skip to content
Threat Feed

Tag

Wasmtime

1 brief RSS
critical advisory

Wasmtime Winch Compiler Aarch64 Sandbox Escape Vulnerability

A sandbox escape vulnerability exists in Wasmtime versions 25.0.0 to 36.0.7, 37.0.0 to 42.0.2, and version 43.0.0 when using the Winch compiler backend on aarch64 architecture, potentially allowing a Wasm guest to access host memory outside its sandbox, leading to denial of service, data leaks, or remote code execution.

wasmtime sandbox-escape memory-corruption aarch64
2r 2t 1c