Ruby values returned from Wasmtime through externrefs from function results or hostcall arguments may be invalid references. This is due to not making the Ruby garbage collector aware that the Ruby value referenced by the externref is still in use.

Impact

Using an externref returned from a Wasm function or an externref provided as an argument to a hostcall could trigger a segmentation fault crashing the host process.