CVE-2025-43853

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-43853
The WebAssembly Micro Runtime's (WAMR) iwasm package is the executable binary built with WAMR VMcore which supports WebAssembly System Interface (WASI) and command line interface. Anyone running WAMR up to and including version 2.2.0 or WAMR built with libc-uvwasi on Windows is affected by a symlink following vulnerability. On WAMR running in Windows, creating a symlink pointing outside of the preopened directory and subsequently opening it with create flag will create a file on host outside of the sandbox. If the symlink points to an existing host file, it's also possible to open it and read its content. Version 2.3.0 fixes the issue.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://github.com/bytecodealliance/wasm-micro-runtime/commit/28702edaf739cdeee54e81efe5868bf00724c33c Patch
https://github.com/bytecodealliance/wasm-micro-runtime/security/advisories/GHSA-8fc8-4g25-c8m7 Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:bytecodealliance:webassembly_micro_runtime:*:*:*:*:*:*:*:*
History

19 Sep 2025, 18:10

Type Values Removed Values Added
First Time Bytecodealliance
Bytecodealliance webassembly Micro Runtime
CPE cpe:2.3:a:bytecodealliance:webassembly_micro_runtime:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://github.com/bytecodealliance/wasm-micro-runtime/commit/28702edaf739cdeee54e81efe5868bf00724c33c - () https://github.com/bytecodealliance/wasm-micro-runtime/commit/28702edaf739cdeee54e81efe5868bf00724c33c - Patch
References () https://github.com/bytecodealliance/wasm-micro-runtime/security/advisories/GHSA-8fc8-4g25-c8m7 - () https://github.com/bytecodealliance/wasm-micro-runtime/security/advisories/GHSA-8fc8-4g25-c8m7 - Exploit, Third Party Advisory

16 May 2025, 14:43

Type Values Removed Values Added
Summary
  • (es) El paquete iwasm de WebAssembly Micro Runtime (WAMR) es el binario ejecutable compilado con WAMR VMcore, compatible con la Interfaz del Sistema WebAssembly (WASI) y la interfaz de línea de comandos. Cualquier usuario de WAMR (hasta la versión 2.2.0 incluida) o compilado con libc-uvwasi en Windows se ve afectado por una vulnerabilidad de enlace simbólico. En WAMR en Windows, al crear un enlace simbólico que apunte fuera del directorio preabierto y abrirlo posteriormente con el indicador de creación, se creará un archivo en el host fuera del entorno de pruebas. Si el enlace simbólico apunta a un archivo del host existente, también es posible abrirlo y leer su contenido. La versión 2.3.0 soluciona el problema.

15 May 2025, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-15 18:15

Updated : 2025-09-19 18:10

NVD link : CVE-2025-43853

Mitre link : CVE-2025-43853

CVE.ORG link : CVE-2025-43853

JSON object : View

Products Affected

bytecodealliance

  • webassembly_micro_runtime
CWE
CWE-61

UNIX Symbolic Link (Symlink) Following