WA
Product
wabt
by WebAssembly · last CVE Sep 12, 2026
13
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 4Low 3
Watch

Add wabt to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-2368
8.8
1%
Mar 17
WebAssembly wabt Malformed File binary-reader-interp.cc OnExport heap-based overflow
Affected: 1.0.36
CVE-2025-15412
7.8
0%
Jan 1
WebAssembly wabt wasm-decompile VarName out-of-bounds
Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.5; +34 more
CVE-2025-15411
7.8
0%
Jan 1
WebAssembly wabt wasm-decompile InsertNode memory corruption
Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.5; +34 more
CVE-2026-90648
7.1
0%
Sep 12
wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack
Affected: through 1.0.41
CVE-2022-43280
7.1
0%
Oct 28
wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr->GetReturnCallDropKeepCount
Affected: 1.0.29
CVE-2022-43282
7.1
0%
Oct 28
wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallIndirectExpr->GetReturnCallDropKeepCount
Affected: 1.0.29
CVE-2025-2584
6.8
1%
Mar 21
WebAssembly wabt binary-reader-interp.cc GetReturnCallDropKeepCount heap-based overflow
Affected: 1.0.36
CVE-2023-27119
5.5
0%
Mar 10
WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::Decompiler::WrapChild
Affected: 1.0.29
CVE-2022-43283
5.5
0%
Oct 28
wasm2c v1.0.29 was discovered to contain an abort in CWriter::Write
Affected: 1.0.29
CVE-2025-3122
5.3
1%
Apr 2
WebAssembly wabt binary-reader-interp.cc BeginFunctionBody null pointer dereference
Affected: 1.0.36
CVE-2025-6275
3.3
0%
Jun 19
WebAssembly wabt binary-reader-interp.cc GetFuncOffset use after free
Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.5; +32 more
CVE-2025-6274
3.3
0%
Jun 19
WebAssembly wabt binary-reader-interp.cc OnDataCount resource consumption
Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.5; +32 more
CVE-2025-6273
3.3
0%
Jun 19
WebAssembly wabt binary-reader-objdump.cc LogOpcode assertion
Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.5; +32 more
Showing 13