These flaws present a potential avenue for a malicious WebAssembly module to breach its designated containment sandbox.
To exploit this, an adversary must first possess a Wasmtime build that is susceptible to these issues, allowing them to compile a module under their control.
It is noted that one of the identified vulnerabilities is specific to ARM64 architectures.
Patched releases addressing these critical issues have since been deployed.
This development underscores ongoing challenges in maintaining strict isolation within software components leveraging WebAssembly technology.
The release of these fixed versions is crucial for platform operators integrating Wasmtime into their systems.
