tocsin

CVE-2025-64345

2 advisories.

crates.io/wasmtime CVE-2025-64345: low 1.8, EPSS 0.12%

Wasmtime provides unsound API access to a WebAssembly shared linear memory

Action: Upgrade wasmtime to 24.0.5 or later.

cargo update -p wasmtime --precise 38.0.4
cargo update -p wasmtime --precise 37.0.3
cargo update -p wasmtime --precise 36.0.3
cargo update -p wasmtime --precise 24.0.5

Affected

introducedfixedlast affected
38.0.038.0.4-
37.0.037.0.3-
26.0.036.0.3-
024.0.5-

Fixed versions

38.0.437.0.336.0.324.0.5

Sources

CVE-2025-64345 · published · modified · JSON

crates.io/wasmtime CVE-2025-64345: low 1.8, EPSS 0.12%

Unsound API access to a WebAssembly shared linear memory

Action: Upgrade wasmtime to 24.0.5 or later.

cargo update -p wasmtime --precise 24.0.5
cargo update -p wasmtime --precise 36.0.3
cargo update -p wasmtime --precise 37.0.3
cargo update -p wasmtime --precise 38.0.4

Affected

introducedfixedlast affected
0.0.0-024.0.5-
25.0.036.0.3-
37.0.037.0.3-
38.0.038.0.4-

Fixed versions

24.0.536.0.337.0.338.0.4

Sources

CVE-2025-64345 · published · modified · JSON