bytecodealliance Vulnerability Advisory Catalog

Total 54 security vulnerabilities recorded for bytecodealliance software and firmware.

← Back to All Vendors
Component: webassembly_micro_runtime

The WebAssembly Micro Runtime's (WAMR) iwasm package is the executable binary built with WAMR VMcore which supports WebAssembly System Interface (WASI...

📅 2025-07-29
CVSS 5.3 Dossier →
Component: wasmtime

Wasmtime is a runtime for WebAssembly. Prior to versions 24.0.4, 33.0.2, and 34.0.2, a bug in Wasmtime's implementation of the WASIp1 set of import fu...

📅 2025-07-18
CVSS 3.5 Dossier →
Component: webassembly_micro_runtime

The WebAssembly Micro Runtime's (WAMR) iwasm package is the executable binary built with WAMR VMcore which supports WebAssembly System Interface (WASI...

📅 2025-05-15
CVSS 5.5 Dossier →
Component: webassembly_micro_runtime

wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) 06df58f is vulnerable to NULL Pointer Dereference in function `block_type_get_result_types....

📅 2024-11-08
CVSS 7.5 Dossier →
Component: webassembly_micro_runtime

An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to escalate privileges via a cra...

📅 2024-11-08
CVSS 7.8 Dossier →
CVE-2024-51745 CRITICAL
Component: wasmtime

Wasmtime is a fast and secure runtime for WebAssembly. Wasmtime's filesystem sandbox implementation on Windows blocks access to special device filenam...

📅 2024-11-05
CVSS 10.0 Dossier →
Component: wasmtime

Wasmtime is an open source runtime for WebAssembly. Under certain concurrent event orderings, a `wasmtime::Engine`'s internal type registry was suscep...

📅 2024-10-09
CVSS 2.9 Dossier →
Component: wasmtime

Wasmtime is an open source runtime for WebAssembly. Wasmtime's implementation of WebAssembly tail calls combined with stack traces can result in a run...

📅 2024-10-09
CVSS 5.5 Dossier →
Component: webassembly_micro_runtime

An out-of-bound memory read vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause a deni...

📅 2024-05-06
CVSS 7.5 Dossier →
Component: webassembly_micro_runtime

A heap buffer overflow vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause at least a ...

📅 2024-05-06
CVSS 6.2 Dossier →
Component: wasmtime

wasmtime is a runtime for WebAssembly. The 19.0.0 release of Wasmtime contains a regression introduced during its development which can lead to a gues...

📅 2024-04-04
CVSS 3.3 Dossier →
Component: webassembly_micro_runtime

Bytecode Alliance wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) before 1.3.0 can have an "double free or corruption" error for a valid We...

📅 2023-12-31
CVSS 5.5 Dossier →
Component: webassembly_micro_runtime

An heap overflow vulnerability was discovered in Bytecode alliance wasm-micro-runtime v.1.2.3 allows a remote attacker to cause a denial of service vi...

📅 2023-11-22
CVSS 7.5 Dossier →
Component: wasmtime

Wasmtime is a standalone runtime for WebAssembly. Wasmtime versions from 10.0.0 to versions 10.02, 11.0.2, and 12.0.1 contain a miscompilation of the ...

📅 2023-09-15
CVSS 2.2 Dossier →
Component: wasmtime

Wasmtime is a standalone runtime for WebAssembly. Prior to versions 6.0.2, 7.0.1, and 8.0.1, Wasmtime's implementation of managing per-instance state,...

📅 2023-04-27
CVSS 3.9 Dossier →
Component: cranelift-codegen

wasmtime is a fast and secure runtime for WebAssembly. Wasmtime's code generation backend, Cranelift, has a bug on x86_64 platforms for the WebAssembl...

📅 2023-03-08
CVSS 3.1 Dossier →
CVE-2023-26489 CRITICAL
Component: cranelift-codegen

wasmtime is a fast and secure runtime for WebAssembly. In affected versions wasmtime's code generator, Cranelift, has a bug on x86_64 targets where ad...

📅 2023-03-08
CVSS 9.9 Dossier →
Component: wasmtime

Wasmtime is a standalone runtime for WebAssembly. Prior to version 2.0.2, there is a bug in Wasmtime's C API implementation where the definition of th...

📅 2022-11-10
CVSS 3.8 Dossier →
Component: wasmtime

Wasmtime is a standalone runtime for WebAssembly. Prior to versions 2.0.2 and 1.0.2, there is a bug in Wasmtime's implementation of its pooling instan...

📅 2022-11-10
CVSS 8.6 Dossier →
Component: wasmtime

Wasmtime is a standalone runtime for WebAssembly. Prior to version 2.0.2, there is a bug in Wasmtime's implementation of its pooling instance allocato...

📅 2022-11-10
CVSS 5.9 Dossier →
Component: cranelift-codegen

Wasmtime is a standalone runtime for WebAssembly. There is a bug in Wasmtime's code generator, Cranelift, for AArch64 targets where constant divisors ...

📅 2022-07-22
CVSS 5.9 Dossier →
Component: cranelift-codegen

Wasmtime is a standalone runtime for WebAssembly. There is a bug in the Wasmtime's code generator, Cranelift, where functions using reference types ma...

📅 2022-07-21
CVSS 6.4 Dossier →
Component: cranelift-codegen

Wasmtime is a standalone runtime for WebAssembly. In affected versions wasmtime's implementation of the SIMD proposal for WebAssembly on x86_64 contai...

📅 2022-06-28
CVSS 4.8 Dossier →
Component: wasmtime

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Was...

📅 2022-03-31
CVSS 8.1 Dossier →
Page 2 of 3 (54 Total Records)