Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes

Two critical vulnerabilities have been discovered in Wasmtime, a runtime for WebAssembly, which could potentially allow malicious modules to break out of their intended sandbox. The flaws require an attacker to have control over a module compiled with a vulnerable Wasmtime build. One of the vulnerabilities specifically affects systems using the ARM64 architecture. The issues have been addressed with the release of fixed versions of Wasmtime.