WA
Product
wasmtime
61
CVEs
0
On KEV
10.0
Max CVSS
19
New 30D
Severity mix
Critical 8High 16Medium 29Low 8
Watch
Add wasmtime to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-51745 | 10.0 | Nov 5 | Wasmtime is a fast and secure runtime for WebAssembly Affected: before 24.0.2; 25.0.0; 25.0.1; 25.0.2; 26.0.0 |
| CVE-2026-115893 New | 9.9 | Oct 23 | Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction Affected: < 36.0.19; >= 37.0.0, < 48.0.7; >= 49.0.0, < 49.0.4 |
| CVE-2026-115889 New | 9.9 | Oct 23 | Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation Affected: < 36.0.19; >= 37.0.0, < 43.0.0 |
| CVE-2026-115384 New | 9.9 | Oct 22 | Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Stack Buffer Overflow Affected: 39.0.0 before 48.0.4; 49.0.0 before 49.0.2 |
| CVE-2026-34987 | 9.9 | Apr 9 | Wasmtime with Winch compiler backend on aarch64 may allow a sandbox-escaping memory access Affected: >= 25.0.0, < 36.0.7; >= 37.0.0, < 42.0.2; >= 43.0.0, < 44.0.1 |
| CVE-2023-26489 | 9.9 | Mar 8 | wasmtime is a fast and secure runtime for WebAssembly Affected: 0.37.0 before 4.0.1; 5.0.0; 6.0.0 |
| CVE-2022-39394 | 9.8 | Nov 10 | Wasmtime is a standalone runtime for WebAssembly Affected: before 1.0.2; 2.0.0 before 2.0.2 |
| CVE-2022-24791 | 9.8 | Mar 31 | Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift Affected: 0.34.0 before 0.34.2; 0.35.0 before 0.35.2 |
Showing 8