WE
Vendor
WebAssembly
5 products with CVEs on record
47
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-90648
WA
wabt
WebAssembly
7.1
0%
Sep 12wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack
CVE-2026-8257
BI
Binaryen
WebAssembly
5.5
0%
May 11WebAssembly Binaryen BrOn wasm-ir-builder.cpp makeBrOn assertion
CVE-2025-15412
WA
wabt
WebAssembly
7.8
0%
Jan 1WebAssembly wabt wasm-decompile VarName out-of-bounds
CVE-2025-15411
WA
wabt
WebAssembly
7.8
0%
Jan 1WebAssembly wabt wasm-decompile InsertNode memory corruption
CVE-2025-14957
BI
Binaryen
WebAssembly
5.5
0%
Dec 19WebAssembly Binaryen IRBuilder wasm-ir-builder.cpp makeLocalTee null pointer dereference
CVE-2025-14956
BI
Binaryen
WebAssembly
7.1
0%
Dec 19WebAssembly Binaryen wasm-binary.cpp readExport heap-based overflow
CVE-2025-6275
WA
wabt
WebAssembly
3.3
0%
Jun 19WebAssembly wabt binary-reader-interp.cc GetFuncOffset use after free
CVE-2025-6274
WA
wabt
WebAssembly
3.3
0%
Jun 19WebAssembly wabt binary-reader-interp.cc OnDataCount resource consumption
CVE-2025-6273
WA
wabt
WebAssembly
3.3
0%
Jun 19WebAssembly wabt binary-reader-objdump.cc LogOpcode assertion
CVE-2025-3122
WA
wabt
WebAssembly
5.3
1%
Apr 2WebAssembly wabt binary-reader-interp.cc BeginFunctionBody null pointer dereference
CVE-2025-2584
WA
wabt
WebAssembly
6.8
1%
Mar 21WebAssembly wabt binary-reader-interp.cc GetReturnCallDropKeepCount heap-based overflow
CVE-2025-2368
WA
wabt
WebAssembly
8.8
1%
Mar 17WebAssembly wabt Malformed File binary-reader-interp.cc OnExport heap-based overflow
CVE-2023-46331
WB
Webassembly Binary Toolkit
Webassembly
5.5
0%
Oct 23WebAssembly wabt 1.0.33 has an Out-of-Bound Memory Read in in DataSegment::IsValidRange(), which lead to segmentation fault
CVE-2023-46332
WB
Webassembly Binary Toolkit
Webassembly
5.5
0%
Oct 23WebAssembly wabt 1.0.33 contains an Out-of-Bound Memory Write in DataSegment::Drop(), which lead to segmentation fault
CVE-2020-18382
BI
Binaryen
Webassembly
6.5
1%
Aug 22Heap-buffer-overflow in /src/wasm/wasm-binary.cpp in wasm::WasmBinaryBuilder::visitBlock(wasm::Block*) in Binaryen 1.38.26
CVE-2020-18378
BI
Binaryen
Webassembly
6.5
1%
Aug 22A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c in Binaryen 1.38.26
CVE-2023-31669
WB
Webassembly Binary Toolkit
Webassembly
5.5
0%
May 23WebAssembly wat2wasm v1.0.32 allows attackers to cause a libc++abi.dylib crash by putting '@' before a quote (")
CVE-2023-31670
WB
Webassembly Binary Toolkit
Webassembly
7.5
1%
May 23An issue in wasm2c 1.0.32, wasm2wat 1.0.32, wasm-decompile 1.0.32, and wasm-validate 1.0.32 allows attackers to cause a Denial of Service (DoS) via running a crafted binary
CVE-2023-27117
WE
Webassembly
Webassembly
7.8
0%
Mar 10WebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt::Node::operator
CVE-2023-27119
WA
Wabt
Webassembly
5.5
0%
Mar 10WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::Decompiler::WrapChild
CVE-2023-27115
WE
Webassembly
Webassembly
5.5
0%
Mar 10WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::cat_compute_size
CVE-2023-27116
WE
Webassembly
Webassembly
5.5
0%
Mar 10WebAssembly v1.0.29 discovered to contain an abort in CWriter::MangleType
CVE-2022-43283
WA
Wabt
Webassembly
5.5
0%
Oct 28wasm2c v1.0.29 was discovered to contain an abort in CWriter::Write
CVE-2022-43280
WA
Wabt
Webassembly
7.1
0%
Oct 28wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr->GetReturnCallDropKeepCount
CVE-2022-43281
WA
Wasm
Webassembly
7.8
0%
Oct 28wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector<wabt::Type, std::allocator<wabt::Type>>::size() at /bits/stl_vector.h
CVE-2022-43282
WA
Wabt
Webassembly
7.1
0%
Oct 28wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallIndirectExpr->GetReturnCallDropKeepCount
CVE-2021-46055
BI
Binaryen
Webassembly
5.5
1%
Jan 10A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::visitRethrow(wasm::Rethrow*)
CVE-2021-46054
BI
Binaryen
Webassembly
5.5
1%
Jan 10A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::visitRethrow(wasm::Rethrow*)
CVE-2021-46053
BI
Binaryen
Webassembly
5.5
1%
Jan 10A Denial of Service vulnerability exists in Binaryen 103
CVE-2021-46052
BI
Binaryen
Webassembly
5.5
1%
Jan 10A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::Tuple::validate
CVE-2021-46050
BI
Binaryen
Webassembly
5.5
1%
Jan 10A Stack Overflow vulnerability exists in Binaryen 103 via the printf_common function
CVE-2021-46048
BI
Binaryen
Webassembly
5.5
1%
Jan 10A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::readFunctions
CVE-2021-45293
BI
Binaryen
Webassembly
5.5
1%
Dec 21A Denial of Service vulnerability exists in Binaryen 103 due to an Invalid memory address dereference in wasm::WasmBinaryBuilder::visitLet
CVE-2021-45290
BI
Binaryen
Webassembly
7.5
2%
Dec 21A Denial of Service vulnerability exits in Binaryen 103 due to an assertion abort in wasm::handle_unreachable
CVE-2019-15759
BI
Binaryen
Webassembly
6.5
1%
Aug 29An issue was discovered in Binaryen 1.38.32
CVE-2019-15758
BI
Binaryen
Webassembly
6.5
1%
Aug 29An issue was discovered in Binaryen 1.38.32
CVE-2019-7700
BI
Binaryen
Webassembly
6.5
1%
Feb 10A heap-based buffer over-read was discovered in wasm::WasmBinaryBuilder::visitCall in wasm-binary.cpp in Binaryen 1.38.22
CVE-2019-7704
BI
Binaryen
Webassembly
6.5
1%
Feb 10wasm::WasmBinaryBuilder::readUserSection in wasm-binary.cpp in Binaryen 1.38.22 triggers an attempt at excessive memory allocation, as demonstrated by wasm-merge and wasm-opt
CVE-2019-7703
BI
Binaryen
Webassembly
6.5
1%
Feb 10In Binaryen 1.38.22, there is a use-after-free problem in wasm::WasmBinaryBuilder::visitCall in wasm-binary.cpp
CVE-2019-7702
BI
Binaryen
Webassembly
6.5
1%
Feb 10A NULL pointer dereference was discovered in wasm::SExpressionWasmBuilder::parseExpression in wasm-s-parser.cpp in Binaryen 1.38.22
CVE-2019-7701
BI
Binaryen
Webassembly
6.5
1%
Feb 10A heap-based buffer over-read was discovered in wasm::SExpressionParser::skipWhitespace() in wasm-s-parser.cpp in Binaryen 1.38.22
CVE-2019-7662
BI
Binaryen
Webassembly
6.5
2%
Feb 9An assertion failure was discovered in wasm::WasmBinaryBuilder::getType() in wasm-binary.cpp in Binaryen 1.38.22
CVE-2019-7152
BI
Binaryen
Webassembly
6.5
1%
Jan 29A heap-based buffer over-read was discovered in wasm::WasmBinaryBuilder::processFunctions() in wasm/wasm-binary.cpp (when calling wasm::WasmBinaryBuilder::getFunctionIndexName) in…
CVE-2019-7154
BI
Binaryen
Webassembly
6.5
1%
Jan 29The main function in tools/wasm2js.cpp in Binaryen 1.38.22 has a heap-based buffer overflow because Emscripten is misused, triggering an error in cashew::JSPrinter::printAst() in…
CVE-2019-7153
BI
Binaryen
Webassembly
6.5
1%
Jan 29A NULL pointer dereference was discovered in wasm::WasmBinaryBuilder::processFunctions() in wasm/wasm-binary.cpp (when calling wasm::WasmBinaryBuilder::getFunctionIndexName) in…
CVE-2019-7151
BI
Binaryen
Webassembly
6.5
1%
Jan 29A NULL pointer dereference was discovered in wasm::Module::getFunctionOrNull in wasm/wasm.cpp in Binaryen 1.38.22