WA
Product
wasm-micro-runtime
by bytecodealliance · last CVE Nov 25, 2025
7
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 5Low 0
Watch

Add wasm-micro-runtime to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-34250
6.2
0%
May 6
A heap buffer overflow vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause at least a denial of service via the…
Affected: 2.0.0
CVE-2025-64704
5.5
0%
Nov 25
WebAssembly Micro Runtime vulnerable to a segmentation fault in v128.store instruction
Affected: < 2.4.4
CVE-2025-43853
5.5
0%
May 15
iwasm vulnerable to filesystem sandbox escape with symlink when using uvwasi feature
Affected: < 2.3.0
CVE-2025-58749
5.3
0%
Sep 16
WAMR runtime hangs or crashes with large memory.fill addresses in LLVM-JIT mode
Affected: < 2.4.2
CVE-2025-54126
5.3
1%
Jul 29
WebAssembly Micro Runtime's `--addr-pool` option allows all IPv4 addresses when subnet mask is not specified
Affected: < 2.4.1
Showing 5