crates.io wasmtime-c-api-impl vulnerabilities

Latest crates.io wasmtime-c-api-impl CVEs

Newest publication first

1. CVE-2025-61670 Wasmtime has memory leak in C API with `externref` and `anyref` types

   Published 2025-10-07

   Low·CVSS 1.0 EPSS 0.19%

   Wasmtime is a runtime for WebAssembly. Wasmtime 37.0.0 and 37.0.1 have memory leaks in the C/C++ API when using bindings for the anyref or externref WebAssembly values. This is caused by a regression introduced during the development of 37.0.0 and all prior versions of Wasmtime a...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.