CVE-2024-25431: Bytecodealliance Webassembly Micro Runtime

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to escalate privileges via a crafted file to the check_was_abi_compatibility function.

Affected products

• Bytecodealliance Webassembly Micro Runtime: before 1.3.2 (fixed in 1.3.2)

Published 2024-11-08. Last modified 2026-06-17.