bytecodealliance Vulnerability Advisory Catalog

Total 54 security vulnerabilities recorded for bytecodealliance software and firmware.

← Back to All Vendors
Component: wasmtime

Wasmtime is an open source runtime for WebAssembly & WASI. Prior to versions 0.34.1 and 0.33.1, there exists a bug in the pooling instance allocator i...

📅 2022-02-16
CVSS 5.1 Dossier →
Component: lucet

Lucet is a native WebAssembly compiler and runtime. There is a bug in the main branch of `lucet-runtime` affecting all versions published to crates.io...

📅 2021-11-30
CVSS 8.5 Dossier →
Component: wasmtime

Wasmtime is an open source runtime for WebAssembly & WASI. In Wasmtime from version 0.26.0 and before version 0.30.0 is affected by a memory unsoundne...

📅 2021-09-17
CVSS 6.3 Dossier →
Component: wasmtime

Wasmtime is an open source runtime for WebAssembly & WASI. Wasmtime before version 0.30.0 is affected by a type confusion vulnerability. As a Rust lib...

📅 2021-09-17
CVSS 6.3 Dossier →
Component: wasmtime

Wasmtime is an open source runtime for WebAssembly & WASI. In Wasmtime from version 0.19.0 and before version 0.30.0 there was a use-after-free bug wh...

📅 2021-09-17
CVSS 6.3 Dossier →
Component: cranelift-codegen

Cranelift is an open-source code generator maintained by Bytecode Alliance. It translates a target-independent intermediate representation into execut...

📅 2021-05-24
CVSS 7.2 Dossier →
Page 3 of 3 (54 Total Records)