WM
Product
Webassembly Micro Runtime
by Bytecodealliance · last CVE Nov 25, 2025
11
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 6Low 0
Watch

Add Webassembly Micro Runtime to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-34250
6.2
0%
May 6
A heap buffer overflow vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause at least a denial of service via the…
Affected: 2.0.0
CVE-2025-64704
5.5
0%
Nov 25
WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime
Affected: before 2.4.4
CVE-2025-43853
5.5
0%
May 15
The WebAssembly Micro Runtime's (WAMR) iwasm package is the executable binary built with WAMR VMcore which supports WebAssembly System Interface (WASI) and command line interface
Affected: before 2.2.0
CVE-2023-52284
5.5
0%
Dec 31
Bytecode Alliance wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) before 1.3.0 can have an "double free or corruption" error for a valid WebAssembly module because…
Affected: before 1.3.0
CVE-2025-58749
5.3
0%
Sep 16
WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime
Affected: before 2.4.2
CVE-2025-54126
5.3
1%
Jul 29
The WebAssembly Micro Runtime's (WAMR) iwasm package is the executable binary built with WAMR VMcore which supports WebAssembly System Interface (WASI) and command line interface
Affected: through 2.4.0
Showing 6