WA
Product
wabt
by WebAssembly · last CVE Sep 12, 2026
13
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 4Low 3
Watch

Add wabt to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-2368
8.8
1%
Mar 17
WebAssembly wabt Malformed File binary-reader-interp.cc OnExport heap-based overflow
Affected: 1.0.36
CVE-2025-15412
7.8
0%
Jan 1
WebAssembly wabt wasm-decompile VarName out-of-bounds
Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.5; +34 more
CVE-2025-15411
7.8
0%
Jan 1
WebAssembly wabt wasm-decompile InsertNode memory corruption
Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.5; +34 more
CVE-2026-90648
7.1
0%
Sep 12
wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack
Affected: through 1.0.41
CVE-2022-43280
7.1
0%
Oct 28
wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr->GetReturnCallDropKeepCount
Affected: 1.0.29
CVE-2022-43282
7.1
0%
Oct 28
wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallIndirectExpr->GetReturnCallDropKeepCount
Affected: 1.0.29
Showing 6