Wasm-micro-runtime (Bytecodealliance) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-11-25. Vendor: Bytecodealliance.

CVEs of Wasm-micro-runtime

• CVE-2025-64713 - CVSS 7.4 (high), 2025-11-25: WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. Prior to version 2.4.4, an out-of-bounds array access issue exists in…
• CVE-2025-64704 - CVSS 5.5 (medium), 2025-11-25: WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. Prior to version 2.4.4, WAMR is susceptible to a segmentation fault…
• CVE-2025-58749 - CVSS 5.3 (medium), 2025-09-16: WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. In WAMR versions prior to 2.4.2, when running in LLVM-JIT mode, the…
• CVE-2025-54126 - CVSS 6.9 (medium), 2025-07-29: The WebAssembly Micro Runtime's (WAMR) iwasm package is the executable binary built with WAMR VMcore which supports WebAssembly System Interface (WASI) and…
• CVE-2025-43853 - CVSS 7 (high), 2025-05-15: The WebAssembly Micro Runtime's (WAMR) iwasm package is the executable binary built with WAMR VMcore which supports WebAssembly System Interface (WASI) and…