Webassembly Micro Runtime (Bytecodealliance) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 25 known versions, newest CVE from 2025-11-25. Vendor: Bytecodealliance.
CVEs of Webassembly Micro Runtime
- CVE-2025-64704 - CVSS 5.5 (medium), 2025-11-25: WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. Prior to version 2.4.4, WAMR is susceptible to a segmentation fault…
- CVE-2025-64713 - CVSS 7.4 (high), 2025-11-25: WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. Prior to version 2.4.4, an out-of-bounds array access issue exists in…
- CVE-2025-58749 - CVSS 5.3 (medium), 2025-09-16: WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. In WAMR versions prior to 2.4.2, when running in LLVM-JIT mode, the…
- CVE-2025-54126 - CVSS 6.9 (medium), 2025-07-29: The WebAssembly Micro Runtime's (WAMR) iwasm package is the executable binary built with WAMR VMcore which supports WebAssembly System Interface (WASI) and…
- CVE-2025-43853 - CVSS 7 (high), 2025-05-15: The WebAssembly Micro Runtime's (WAMR) iwasm package is the executable binary built with WAMR VMcore which supports WebAssembly System Interface (WASI) and…
- CVE-2024-27532 - CVSS 7.5 (high), 2024-11-08: wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) 06df58f is vulnerable to NULL Pointer Dereference in function `block_type_get_result_types.
- CVE-2024-25431 - CVSS 8.8 (high), 2024-11-08: An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to escalate privileges via a crafted…
- CVE-2024-34251 - CVSS 7.5 (high), 2024-05-06: An out-of-bound memory read vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause a denial of…
- CVE-2024-34250 - CVSS 6.2 (medium), 2024-05-06: A heap buffer overflow vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause at least a denial…
- CVE-2023-52284 - CVSS 5.5 (medium), 2023-12-31: Bytecode Alliance wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) before 1.3.0 can have an "double free or corruption" error for a valid…
- CVE-2023-48105 - CVSS 7.5 (high), 2023-11-22: An heap overflow vulnerability was discovered in Bytecode alliance wasm-micro-runtime v.1.2.3 allows a remote attacker to cause a denial of service via the…
