Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes

Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module to escape the sandbox intended to contain it, the project’s maintainers say.

An attacker would first need a vulnerable Wasmtime build to compile a module they control, and one of the flaws affects only ARM64 systems. Fixed versions were released on

The post “Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes” appeared first on The Hacker News

Source:The Hacker News – [email protected] (The Hacker News)