Critical Wasmtime Vulnerabilities Allow WebAssembly Module Sandbox Escapes

Two critical vulnerabilities in Wasmtime enable malicious WebAssembly modules to escape sandboxed environments, with one flaw specifically affecting ARM64 systems. The flaws require a vulnerable Wasmtime build to exploit, and fixed versions have been released.

Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module to escape the sandbox intended to contain it, the project's maintainers say.

An attacker would first need a vulnerable Wasmtime build to compile a module they control, and one of the flaws affects only ARM64 systems. Fixed versions were released on

Read original article