CVE-2025-69261

← CVEs

HIGH 7.5

Published

2025-12-30

Last Modified

2026-03-09

Affected Apps

Affected Devices

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

WasmEdge is a WebAssembly runtime. Prior to version 0.16.0-alpha.3, a multiplication in `WasmEdge/include/runtime/instance/memory.h` can wrap, causing `checkAccessBound()` to incorrectly allow the access. This leads to a segmentation fault. Version 0.16.0-alpha.3 contains a patch for the issue.

Affected Applications in Environment 8

Edge vWindows 10 (17.51567.0)

1 device

Edge v145.0.3800.70 (144.0.3719.115)

1 device

Edge vWindows 11 (26.57293.0)

1 device

Edge vWindows 11 (26.57373.0)

1 device

Edge v142.0.3595.80 (142.3595.25111280)

1 device

Edge vWindows 11 (1) (18.53621.0)