UnratedFix available
Possible host crash with host-to-wasm component intrinsics
Type: advisorySources: OSV
This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-4h67-722j-5pmc For more information see the GitHub-hosted security advisory.
- Products
- wasmtime
- Affected versions
- Not specified
- Fixed versions
- 38.0.3
- CVEs
- CVE-2025-62711
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 30 Oct 2026, 08:44 UTC · Revision 1
Source evidence
Possible host crash with host-to-wasm component intrinsics
core-osv · Original sourcePublished 18 Jul 2025, 12:00 UTC
This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-4h67-722j-5pmc For more information see the GitHub-hosted security advisory.
osv:RUSTSEC-2025-0112
wasmtime
Fixed versions: 38.0.3
Complete source record
{
"id": "eafbffca0ce08bd54cc75625581072591b4091276f774342090c85264e8c019e",
"url": "https://osv.dev/vulnerability/RUSTSEC-2025-0112",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Possible host crash with host-to-wasm component intrinsics",
"summary": "This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-4h67-722j-5pmc For more information see the GitHub-hosted security advisory.",
"evidence": "osv:RUSTSEC-2025-0112",
"products": [
{
"name": {
"value": "wasmtime",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "38.0.3",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "RUSTSEC-2025-0112",
"aliases": [
"CVE-2025-62711",
"GHSA-4h67-722j-5pmc",
"RUSTSEC-2025-0112"
],
"affected": [
{
"ranges": [
{
"type": "SEMVER",
"events": [
{
"introduced": "38.0.0"
},
{
"fixed": "38.0.3"
}
]
}
],
"package": {
"name": "wasmtime",
"purl": "pkg:cargo/wasmtime",
"ecosystem": "crates.io"
},
"database_specific": {
"cvss": null,
"source": "https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2025-0112.json",
"categories": [],
"informational": null
},
"ecosystem_specific": {
"affects": {
"os": [],
"arch": [],
"functions": []
},
"affected_functions": null
}
}
],
"modified": "2026-10-12T18:00:12.401338698Z",
"provider": "osv",
"references": [
"https://crates.io/crates/wasmtime",
"https://rustsec.org/advisories/RUSTSEC-2025-0112.html",
"https://github.com/bytecodealliance/wasmtime/pull/11592"
],
"provider_metadata": {
"license": "CC0-1.0"
}
},
"related_cves": [
{
"value": "CVE-2025-62711",
"evidence": "/aliases"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 306425,
"published_at": "2025-07-18T12:00:00+00:00"
}