WE
Vendor
WebAssembly
47
CVEs
0
On KEV
0
New 30D
Products
BI7.5
Binaryen
WebAssembly
25 CVEs0 on KEV0 new
WA8.8
wabt
WebAssembly
13 CVEs0 on KEV0 new
WB7.5
Webassembly Binary Toolkit
Webassembly
5 CVEs0 on KEV0 new
WE7.8
Webassembly
Webassembly
3 CVEs0 on KEV0 new
WA7.8
Wasm
Webassembly
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-90648 | WA wabt WebAssembly | 7.1 | Sep 12 | wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack |
| CVE-2026-8257 | BI Binaryen WebAssembly | 5.5 | May 11 | WebAssembly Binaryen BrOn wasm-ir-builder.cpp makeBrOn assertion |
| CVE-2025-15412 | WA wabt WebAssembly | 7.8 | Jan 1 | WebAssembly wabt wasm-decompile VarName out-of-bounds |
| CVE-2025-15411 | WA wabt WebAssembly | 7.8 | Jan 1 | WebAssembly wabt wasm-decompile InsertNode memory corruption |
| CVE-2025-14957 | BI Binaryen WebAssembly | 5.5 | Dec 19 | WebAssembly Binaryen IRBuilder wasm-ir-builder.cpp makeLocalTee null pointer dereference |
| CVE-2025-14956 | BI Binaryen WebAssembly | 7.1 | Dec 19 | WebAssembly Binaryen wasm-binary.cpp readExport heap-based overflow |
| CVE-2025-6275 | WA wabt WebAssembly | 3.3 | Jun 19 | WebAssembly wabt binary-reader-interp.cc GetFuncOffset use after free |
| CVE-2025-6274 | WA wabt WebAssembly | 3.3 | Jun 19 | WebAssembly wabt binary-reader-interp.cc OnDataCount resource consumption |
| CVE-2025-6273 | WA wabt WebAssembly | 3.3 | Jun 19 | WebAssembly wabt binary-reader-objdump.cc LogOpcode assertion |
| CVE-2025-3122 | WA wabt WebAssembly | 5.3 | Apr 2 | WebAssembly wabt binary-reader-interp.cc BeginFunctionBody null pointer dereference |
| CVE-2025-2584 | WA wabt WebAssembly | 6.8 | Mar 21 | WebAssembly wabt binary-reader-interp.cc GetReturnCallDropKeepCount heap-based overflow |
| CVE-2025-2368 | WA wabt WebAssembly | 8.8 | Mar 17 | WebAssembly wabt Malformed File binary-reader-interp.cc OnExport heap-based overflow |
| CVE-2023-46331 | WB Webassembly Binary Toolkit Webassembly | 5.5 | Oct 23 | WebAssembly wabt 1.0.33 has an Out-of-Bound Memory Read in in DataSegment::IsValidRange(), which lead to segmentation fault |
| CVE-2023-46332 | WB Webassembly Binary Toolkit Webassembly | 5.5 | Oct 23 | WebAssembly wabt 1.0.33 contains an Out-of-Bound Memory Write in DataSegment::Drop(), which lead to segmentation fault |
| CVE-2020-18382 | BI Binaryen Webassembly | 6.5 | Aug 22 | Heap-buffer-overflow in /src/wasm/wasm-binary.cpp in wasm::WasmBinaryBuilder::visitBlock(wasm::Block*) in Binaryen 1.38.26 |
| CVE-2020-18378 | BI Binaryen Webassembly | 6.5 | Aug 22 | A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c in Binaryen 1.38.26 |
| CVE-2023-31669 | WB Webassembly Binary Toolkit Webassembly | 5.5 | May 23 | WebAssembly wat2wasm v1.0.32 allows attackers to cause a libc++abi.dylib crash by putting '@' before a quote (") |
| CVE-2023-31670 | WB Webassembly Binary Toolkit Webassembly | 7.5 | May 23 | An issue in wasm2c 1.0.32, wasm2wat 1.0.32, wasm-decompile 1.0.32, and wasm-validate 1.0.32 allows attackers to cause a Denial of Service (DoS) via running a crafted binary |
| CVE-2023-27117 | WE Webassembly Webassembly | 7.8 | Mar 10 | WebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt::Node::operator |
| CVE-2023-27119 | WA Wabt Webassembly | 5.5 | Mar 10 | WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::Decompiler::WrapChild |
| CVE-2023-27115 | WE Webassembly Webassembly | 5.5 | Mar 10 | WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::cat_compute_size |
| CVE-2023-27116 | WE Webassembly Webassembly | 5.5 | Mar 10 | WebAssembly v1.0.29 discovered to contain an abort in CWriter::MangleType |
| CVE-2022-43283 | WA Wabt Webassembly | 5.5 | Oct 28 | wasm2c v1.0.29 was discovered to contain an abort in CWriter::Write |
| CVE-2022-43280 | WA Wabt Webassembly | 7.1 | Oct 28 | wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr->GetReturnCallDropKeepCount |
| CVE-2022-43281 | WA Wasm Webassembly | 7.8 | Oct 28 | wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector<wabt::Type, std::allocator<wabt::Type>>::size() at /bits/stl_vector.h |
| CVE-2022-43282 | WA Wabt Webassembly | 7.1 | Oct 28 | wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallIndirectExpr->GetReturnCallDropKeepCount |
| CVE-2021-46055 | BI Binaryen Webassembly | 5.5 | Jan 10 | A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::visitRethrow(wasm::Rethrow*) |
| CVE-2021-46054 | BI Binaryen Webassembly | 5.5 | Jan 10 | A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::visitRethrow(wasm::Rethrow*) |
| CVE-2021-46053 | BI Binaryen Webassembly | 5.5 | Jan 10 | A Denial of Service vulnerability exists in Binaryen 103 |
| CVE-2021-46052 | BI Binaryen Webassembly | 5.5 | Jan 10 | A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::Tuple::validate |
| CVE-2021-46050 | BI Binaryen Webassembly | 5.5 | Jan 10 | A Stack Overflow vulnerability exists in Binaryen 103 via the printf_common function |
| CVE-2021-46048 | BI Binaryen Webassembly | 5.5 | Jan 10 | A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::readFunctions |
| CVE-2021-45293 | BI Binaryen Webassembly | 5.5 | Dec 21 | A Denial of Service vulnerability exists in Binaryen 103 due to an Invalid memory address dereference in wasm::WasmBinaryBuilder::visitLet |
| CVE-2021-45290 | BI Binaryen Webassembly | 7.5 | Dec 21 | A Denial of Service vulnerability exits in Binaryen 103 due to an assertion abort in wasm::handle_unreachable |
| CVE-2019-15759 | BI Binaryen Webassembly | 6.5 | Aug 29 | An issue was discovered in Binaryen 1.38.32 |
| CVE-2019-15758 | BI Binaryen Webassembly | 6.5 | Aug 29 | An issue was discovered in Binaryen 1.38.32 |
| CVE-2019-7700 | BI Binaryen Webassembly | 6.5 | Feb 10 | A heap-based buffer over-read was discovered in wasm::WasmBinaryBuilder::visitCall in wasm-binary.cpp in Binaryen 1.38.22 |
| CVE-2019-7704 | BI Binaryen Webassembly | 6.5 | Feb 10 | wasm::WasmBinaryBuilder::readUserSection in wasm-binary.cpp in Binaryen 1.38.22 triggers an attempt at excessive memory allocation, as demonstrated by wasm-merge and wasm-opt |
| CVE-2019-7703 | BI Binaryen Webassembly | 6.5 | Feb 10 | In Binaryen 1.38.22, there is a use-after-free problem in wasm::WasmBinaryBuilder::visitCall in wasm-binary.cpp |
| CVE-2019-7702 | BI Binaryen Webassembly | 6.5 | Feb 10 | A NULL pointer dereference was discovered in wasm::SExpressionWasmBuilder::parseExpression in wasm-s-parser.cpp in Binaryen 1.38.22 |
| CVE-2019-7701 | BI Binaryen Webassembly | 6.5 | Feb 10 | A heap-based buffer over-read was discovered in wasm::SExpressionParser::skipWhitespace() in wasm-s-parser.cpp in Binaryen 1.38.22 |
| CVE-2019-7662 | BI Binaryen Webassembly | 6.5 | Feb 9 | An assertion failure was discovered in wasm::WasmBinaryBuilder::getType() in wasm-binary.cpp in Binaryen 1.38.22 |
| CVE-2019-7152 | BI Binaryen Webassembly | 6.5 | Jan 29 | A heap-based buffer over-read was discovered in wasm::WasmBinaryBuilder::processFunctions() in wasm/wasm-binary.cpp (when calling wasm::WasmBinaryBuilder::getFunctionIndexName) in… |
| CVE-2019-7154 | BI Binaryen Webassembly | 6.5 | Jan 29 | The main function in tools/wasm2js.cpp in Binaryen 1.38.22 has a heap-based buffer overflow because Emscripten is misused, triggering an error in cashew::JSPrinter::printAst() in… |
| CVE-2019-7153 | BI Binaryen Webassembly | 6.5 | Jan 29 | A NULL pointer dereference was discovered in wasm::WasmBinaryBuilder::processFunctions() in wasm/wasm-binary.cpp (when calling wasm::WasmBinaryBuilder::getFunctionIndexName) in… |
| CVE-2019-7151 | BI Binaryen Webassembly | 6.5 | Jan 29 | A NULL pointer dereference was discovered in wasm::Module::getFunctionOrNull in wasm/wasm.cpp in Binaryen 1.38.22 |
