WM
Product
Webassembly Micro Runtime
11
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 6Low 0
Watch
Add Webassembly Micro Runtime to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-25431 | 7.8 | Nov 8 | An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to escalate privileges via a crafted file to the… Affected: before 1.3.2 |
| CVE-2024-27532 | 7.5 | Nov 8 | wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) 06df58f is vulnerable to NULL Pointer Dereference in function `block_type_get_result_types Affected: before 2.4.2 |
| CVE-2024-34251 | 7.5 | May 6 | An out-of-bound memory read vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause a denial of service via the… Affected: 2.0.0 |
| CVE-2023-48105 | 7.5 | Nov 22 | An heap overflow vulnerability was discovered in Bytecode alliance wasm-micro-runtime v.1.2.3 allows a remote attacker to cause a denial of service via the… Affected: 1.2.3 |
| CVE-2025-64713 | 7.4 | Nov 25 | WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime Affected: before 2.4.4 |
| CVE-2024-34250 | 6.2 | May 6 | A heap buffer overflow vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause at least a denial of service via the… Affected: 2.0.0 |
| CVE-2025-64704 | 5.5 | Nov 25 | WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime Affected: before 2.4.4 |
| CVE-2025-43853 | 5.5 | May 15 | The WebAssembly Micro Runtime's (WAMR) iwasm package is the executable binary built with WAMR VMcore which supports WebAssembly System Interface (WASI) and command line interface Affected: before 2.2.0 |
| CVE-2023-52284 | 5.5 | Dec 31 | Bytecode Alliance wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) before 1.3.0 can have an "double free or corruption" error for a valid WebAssembly module because… Affected: before 1.3.0 |
| CVE-2025-58749 | 5.3 | Sep 16 | WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime Affected: before 2.4.2 |
| CVE-2025-54126 | 5.3 | Jul 29 | The WebAssembly Micro Runtime's (WAMR) iwasm package is the executable binary built with WAMR VMcore which supports WebAssembly System Interface (WASI) and command line interface Affected: through 2.4.0 |
Showing 11