CVE-2025-58749

WAMR runtime hangs or crashes with large memory.fill addresses in LLVM-JIT mode

State: Published
Severity: 2.1 Low
Published: Sep 16, 2025
Updated: Sep 16, 2025
Reserved: Sep 4, 2025

Description

WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. In WAMR versions prior to 2.4.2, when running in LLVM-JIT mode, the runtime cannot exit normally when executing WebAssembly programs containing a memory.fill instruction where the first operand (memory address pointer) is greater than or equal to 2147483648 bytes (2GiB). This causes the runtime to hang in release builds or crash in debug builds due to accessing an invalid pointer. The issue does not occur in FAST-JIT mode or other runtime tools. This has been fixed in version 2.4.2.

Scores

CVSS	Score	Vector	Source
4.0	2.1 Low	CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N	GitHub_M

Weaknesses

CWE-822 Untrusted Pointer Dereference
CWE-190 Integer Overflow or Wraparound

Affected Products

Product	Versions
wasm-micro-runtimebytecodealliance	< 2.4.2Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.