CVE-2025-64713: WebAssembly Micro Runtime frame_offset_bottom array bounds overflow in fast Interpreter mode when handling GET_GLOBAL(I32) followed by if opcode

Overview

Severity
Medium (CVSS 5.1)
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploit Status
Not Exploited
Patch Tuesday
2025-Nov
Released
2025-11-29
Last Updated
2026-08-07
EPSS Score
0.33% (percentile: 25.9%)

Affected Products (1)

Other

  • 20526-17086

Revision History

  • 2025-11-29: Information published.
  • 2025-12-01: Information published.
  • 2026-08-07: Information published.