WM
Product
Webassembly Micro Runtime
11
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 6Low 0
Watch
Add Webassembly Micro Runtime to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-34250 | 6.2 | May 6 | A heap buffer overflow vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause at least a denial of service via the… Affected: 2.0.0 |
| CVE-2025-64704 | 5.5 | Nov 25 | WebAssembly Micro Runtime vulnerable to a segmentation fault in v128.store instruction Affected: before 2.4.4 |
| CVE-2025-43853 | 5.5 | May 15 | iwasm vulnerable to filesystem sandbox escape with symlink when using uvwasi feature Affected: before 2.2.0 |
| CVE-2023-52284 | 5.5 | Dec 31 | Bytecode Alliance wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) before 1.3.0 can have an "double free or corruption" error for a valid WebAssembly module because… Affected: before 1.3.0 |
| CVE-2025-58749 | 5.3 | Sep 16 | WAMR runtime hangs or crashes with large memory.fill addresses in LLVM-JIT mode Affected: before 2.4.2 |
| CVE-2025-54126 | 5.3 | Jul 29 | WebAssembly Micro Runtime's `--addr-pool` option allows all IPv4 addresses when subnet mask is not specified Affected: through 2.4.0 |
Showing 6