CVE-2025-69261

WasmEdge is a WebAssembly runtime. Prior to version 0.16.0-alpha.3, a multiplication in `WasmEdge/include/runtime/instance/memory.h` can wrap, causing `checkAccessBound()` to incorrectly allow the access. This leads to a segmentation fault. Version 0.16.0-alpha.3 contains a patch for the issue.

• CWE-190

• https://github.com/WasmEdge/WasmEdge/commit/37cc9fa19bd23edbbdaa9252059b17f191fa4d17Patch
• https://github.com/WasmEdge/WasmEdge/security/advisories/GHSA-89fm-8mr7-gg4mVendor Advisory

Published

Dec 30, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-69256The Serverless Framework is a framework for using AWS Lambda…7.5
• CVE-2025-69257theshit is a command-line utility that automatically detects…6.7
• CVE-2025-69258A LoadLibraryEX vulnerability in Trend Micro Apex Central co…9.8
• CVE-2025-69259A message unchecked NULL return value vulnerability in Trend…7.5
• CVE-2025-6926Improper Authentication vulnerability in Wikimedia Foundatio…8.8
• CVE-2025-69260A message out-of-bounds read vulnerability in Trend Micro Ap…7.5
• CVE-2025-69262pnpm is a package manager. Versions 6.25.0 through 10.26.2 h…7.8
• CVE-2025-69263pnpm is a package manager. Versions 10.26.2 and below store …8.8
• CVE-2025-69264pnpm is a package manager. Versions 10.0.0 through 10.25 all…9.8
• CVE-2025-69267Improper Limitation of a Pathname to a Restricted Directory …6.5
• CVE-2025-69268Improper Neutralization of Input During Web Page Generation …6.1
• CVE-2025-69269Improper Neutralization of Special Elements used in an OS Co…9.8