bytecodealliance Vulnerability Advisory Catalog

Total 54 security vulnerabilities recorded for bytecodealliance software and firmware.

← Back to All Vendors
Component: wasmtime

Wasmtime is a runtime for WebAssembly. All versions prior to 24.0.10; versions 25.0.0 through those before 36.0.11; versions 37.0.0 through those bef...

📅 2026-07-01
CVSS 5.0 Dossier →
Component: wasmtime

Wasmtime is a runtime for WebAssembly. In versions prior to 24.0.9, 36.0.10, and 44.0.2, when a filesystem preopen is given DirPerms::all() and FilePe...

📅 2026-06-15
CVSS 7.5 Dossier →
Component: wasmtime

Wasmtime is a runtime for WebAssembly. From 30.0.0 to 36.0.8, 43.0.2, and 44.0.1, Wasmtime's allocation logic for a WebAssembly table contained checke...

📅 2026-05-14
CVSS 7.5 Dossier →
Component: wasmtime

Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, Wasmtime's implementation of transcoding strings between component...

📅 2026-04-09
CVSS 5.4 Dossier →
Component: wasmtime

Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's Winch compiler backend contains a bug where transl...

📅 2026-04-09
CVSS 7.5 Dossier →
Component: wasmtime

Wasmtime is a runtime for WebAssembly. From 28.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's implementation of its pooling allocator contains a...

📅 2026-04-09
CVSS 6.3 Dossier →
CVE-2026-34987 CRITICAL
Component: wasmtime

Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime with its Winch (baseline) non-default compiler backe...

📅 2026-04-09
CVSS 9.9 Dossier →
Component: wasmtime

Wasmtime is a runtime for WebAssembly. In 43.0.0, cloning a wasmtime::Linker is unsound and can result in use-after-free bugs. This bug is not control...

📅 2026-04-09
CVSS 5.0 Dossier →
Component: wasmtime

Wasmtime is a runtime for WebAssembly. From 32.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's Cranelift compilation backend contains a bug on aa...

📅 2026-04-09
CVSS 7.8 Dossier →
Component: wasmtime

Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's Winch compiler contains a vulnerability where the ...

📅 2026-04-09
CVSS 7.5 Dossier →
Component: wasmtime

Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's Winch compiler contains a bug where a 64-bit table...

📅 2026-04-09
CVSS 6.5 Dossier →
Component: wasmtime

Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, On x86-64 platforms with SSE3 disabled Wasmtime's compilation of t...

📅 2026-04-09
CVSS 5.7 Dossier →
Component: wasmtime

Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, Wasmtime contains a possible panic which can happen when a flags-t...

📅 2026-04-09
CVSS 7.5 Dossier →
Component: wasmtime

Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, Wasmtime's implementation of transcoding strings into the Componen...

📅 2026-04-09
CVSS 6.5 Dossier →
Component: wasmtime

Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, Wasmtime contains a vulnerability where when transcoding a UTF-16 ...

📅 2026-04-09
CVSS 8.1 Dossier →
Component: wasmtime

Wasmtime is a runtime for WebAssembly. Prior to versions 24.0.6, 36.0.6, 4.0.04, 41.0.4, and 42.0.0, Wasmtime's implementation of the `wasi:http/types...

📅 2026-02-24
CVSS 7.5 Dossier →
Component: wasmtime

Wasmtime is a runtime for WebAssembly. Prior to versions 24.0.6, 36.0.6, 4.0.04, 41.0.4, and 42.0.0, Wasmtime's implementation of WASI host interfaces...

📅 2026-02-24
CVSS 6.5 Dossier →
Component: wasmtime

Wasmtime is a runtime for WebAssembly. Starting with Wasmtime 39.0.0, the `component-model-async` feature became the default, which brought with it a ...

📅 2026-02-24
CVSS 7.5 Dossier →
Component: wasmtime

Wasmtime is a runtime for WebAssembly. Starting in version 29.0.0 and prior to version 36.0.5, 40.0.3, and 41.0.1, on x86-64 platforms with AVX, Wasmt...

📅 2026-01-27
CVSS 5.5 Dossier →
Component: webassembly_micro_runtime

WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. Prior to version 2.4.4, an out-of-bounds array access issue e...

📅 2025-11-25
CVSS 5.1 Dossier →
Component: webassembly_micro_runtime

WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. Prior to version 2.4.4, WAMR is susceptible to a segmentation...

📅 2025-11-25
CVSS 4.7 Dossier →
Component: wasmtime

Wasmtime is a runtime for WebAssembly. In versions from 38.0.0 to before 38.0.3, the implementation of component-model related host-to-wasm trampoline...

📅 2025-10-24
CVSS 3.1 Dossier →
Component: wasmtime

Wasmtime is a runtime for WebAssembly. Wasmtime 37.0.0 and 37.0.1 have memory leaks in the C/C++ API when using bindings for the `anyref` or `externre...

📅 2025-10-07
CVSS 3.3 Dossier →
Component: webassembly_micro_runtime

WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. In WAMR versions prior to 2.4.2, when running in LLVM-JIT mod...

📅 2025-09-16
CVSS 5.3 Dossier →
Page 1 of 3 (54 Total Records)