CVE-2025-69261

HIGH 7.5CVE-2025-69261 · Published 30/12/2025 · updated 17/06/2026

In short

CVE-2025-69261 is a HIGH (CVSS 7.5) vulnerability affecting wasmedge (linuxfoundation).
Chance of exploitation in the next 30 days (EPSS): 0.33%, higher than 26.3% of all vulnerabilities.
Fix: update to 0.16.0 or later.

Package	Affected versions	Patched versions
wasmedge linuxfoundation	`= 0.16.0< 0.16.0`	`0.16.0`

Description

WasmEdge is a WebAssembly runtime. Prior to version 0.16.0-alpha.3, a multiplication in `WasmEdge/include/runtime/instance/memory.h` can wrap, causing `checkAccessBound()` to incorrectly allow the access. This leads to a segmentation fault. Version 0.16.0-alpha.3 contains a patch for the issue.

References

WasmEdge/WasmEdge commit 37cc9fa · Patch
WasmEdge/WasmEdge security advisory · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free