Wasmtime vulnerable to segfault when using component resources

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-62711 · Microsoft / collected KEV context

EUVD-2025-35897

GHSA-4h67-722j-5pmc

RUSTSEC-2025-0112

cve-program · CVE-2025-62711

• https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-4h67-722j-5pmc
• https://github.com/bytecodealliance/wasmtime/pull/11592
• https://github.com/bytecodealliance/wasmtime/commit/192f2fcdadfec9d0cf6b58548a85a7307450cbf5

euvd · EUVD-2025-35897

• https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-4h67-722j-5pmc
• https://github.com/bytecodealliance/wasmtime/pull/11592
• https://github.com/bytecodealliance/wasmtime/commit/192f2fcdadfec9d0cf6b58548a85a7307450cbf5

nvd · CVE-2025-62711

• https://github.com/bytecodealliance/wasmtime/commit/192f2fcdadfec9d0cf6b58548a85a7307450cbf5
• https://github.com/bytecodealliance/wasmtime/pull/11592
• https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-4h67-722j-5pmc

osv · GHSA-4h67-722j-5pmc

• https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-4h67-722j-5pmc
• https://nvd.nist.gov/vuln/detail/CVE-2025-62711
• https://github.com/bytecodealliance/wasmtime/pull/11592
• https://github.com/bytecodealliance/wasmtime/commit/192f2fcdadfec9d0cf6b58548a85a7307450cbf5
• https://github.com/bytecodealliance/wasmtime
• https://rustsec.org/advisories/RUSTSEC-2025-0112.html

osv · RUSTSEC-2025-0112

• https://crates.io/crates/wasmtime
• https://rustsec.org/advisories/RUSTSEC-2025-0112.html
• https://github.com/bytecodealliance/wasmtime/pull/11592

No related operational record is retained in the current change model.