wasm-micro-runtime vulnerabilities | LiveThreat CVE Feed

Product

wasm-micro-runtime

by bytecodealliance · last CVE Nov 25, 2025

CVEs

On KEV

7.4

Max CVSS

New 30D

Severity mix

Critical 0High 1Medium 3Low 0

Severity

Exploitation

Watch

Add wasm-micro-runtime to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-64704	5.5	0%	Nov 25	WebAssembly Micro Runtime vulnerable to a segmentation fault in v128.store instruction Affected: < 2.4.4
CVE-2025-58749	5.3	0%	Sep 16	WAMR runtime hangs or crashes with large memory.fill addresses in LLVM-JIT mode Affected: < 2.4.2
CVE-2025-54126	5.3	1%	Jul 29	WebAssembly Micro Runtime's `--addr-pool` option allows all IPv4 addresses when subnet mask is not specified Affected: < 2.4.1