Wasmi Labs Wasmi (WebAssembly Interpreter) 1.0.0 for Rust
Approved changes feed: RSS · Atom
cpe:2.3:a:wasmi-labs:wasmi:1.0.0:*:*:*:*:rust:*:*part: a version: 1.0.0 update: *
| Vendor | Wasmi Labs (4299f91c-8e92-5425-808a-a7834ac48883) |
|---|---|
| Product | Wasmi (0458be2a-b539-5dbc-a75d-8aa2d14a66eb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | rust |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:cargo/wasmi |
purl2cpe | 2026-06-01 10:16:58.021683 |
pkg:github/wasmi-labs/wasmi |
purl2cpe | 2026-06-01 10:16:58.021684 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-66627 |
vulnerable | 2026-06-08 07:41:19.367038 |
Wasmi's Linear Memory has a Critical Use After Free Vulnerability
HIGH (8.4)
Wasmi is a WebAssembly interpreter focused on constrained and embedded systems. In versions 0.41.0, 0.41.1, 0.42.0 through 0.47.1, 0.50.0 through 0.51.2 and 1.0.0, Wasmi's linear memory implementation leads to a Use After Free vulnerability, triggered by a WebAssembly module under certain memory growth conditions. This issue potentially leads to memory corruption, information disclosure, or code execution. This issue is fixed in versions 0.41.2, 0.47.1, 0.51.3 and 1.0.1. To workaround this issue, consider limiting the maximum linear memory sizes where feasible.
Published: 2025-12-09T02:52:46.938Z
Updated: 2025-12-09T15:21:18.048Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.