Webassembly Binary Toolkit (Webassembly) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 35 known versions, newest CVE from 2025-04-02. Vendor: Webassembly.

CVEs of Webassembly Binary Toolkit

• CVE-2025-3122 - CVSS 5.3 (medium), 2025-04-02: A vulnerability classified as problematic was found in WebAssembly wabt 1.0.36. Affected by this vulnerability is the function…
• CVE-2023-46331 - CVSS 5.5 (medium), 2023-10-23: WebAssembly wabt 1.0.33 has an Out-of-Bound Memory Read in in DataSegment::IsValidRange(), which lead to segmentation fault.
• CVE-2023-46332 - CVSS 5.5 (medium), 2023-10-23: WebAssembly wabt 1.0.33 contains an Out-of-Bound Memory Write in DataSegment::Drop(), which lead to segmentation fault.
• CVE-2023-31669 - CVSS 5.5 (medium), 2023-05-23: WebAssembly wat2wasm v1.0.32 allows attackers to cause a libc++abi.dylib crash by putting '@' before a quote (").
• CVE-2023-31670 - CVSS 7.5 (high), 2023-05-23: An issue in wasm2c 1.0.32, wasm2wat 1.0.32, wasm-decompile 1.0.32, and wasm-validate 1.0.32 allows attackers to cause a Denial of Service (DoS) via running a…