Bytecodealliance Webassembly Micro Runtime vulnerabilities

• bytecodealliance webassembly micro runtime, wasm-micro-runtime +1 more WebAssembly Micro Runtime frame_offset_bottom array bounds overflow in fast Interpreter mode when handling GET_GLOBAL(I32) followed by if opcode CVE-2025-64713 5.1 MediumNovember 25, 2025
• bytecodealliance webassembly micro runtime, wasm-micro-runtime +1 more WebAssembly Micro Runtime vulnerable to a segmentation fault in v128.store instruction CVE-2025-64704 4.7 MediumNovember 25, 2025
• bytecodealliance webassembly micro runtime, wasm-micro-runtime +1 more WAMR runtime hangs or crashes with large memory.fill addresses in LLVM-JIT mode CVE-2025-58749 Fix available 2.1 LowSeptember 16, 2025
• bytecodealliance webassembly micro runtime, wasm-micro-runtime +1 more WebAssembly Micro Runtime's `--addr-pool` option allows all IPv4 addresses when subnet mask is not specified CVE-2025-54126 Fix available 6.9 MediumJuly 29, 2025
• bytecodealliance webassembly micro runtime, wasm-micro-runtime +1 more iwasm vulnerable to filesystem sandbox escape with symlink when using uvwasi feature CVE-2025-43853 7.0 HighMay 15, 2025
• bytecodealliance webassembly micro runtime wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) 06df58f is vulnerable to NULL Pointer... CVE-2024-27532 Fix available 7.5 HighNovember 8, 2024
• bytecodealliance webassembly micro runtime An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f... CVE-2024-25431 Fix available 7.8 HighNovember 8, 2024
• bytecodealliance wasm micro runtime, webassembly micro runtime +1 more An out-of-bound memory read vulnerability was discovered in Bytecode Alliance wasm-micro-runtime... CVE-2024-34251 7.5 HighMay 6, 2024
• bytecodealliance wasm micro runtime, webassembly micro runtime +1 more A heap buffer overflow vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0... CVE-2024-34250 Fix available 6.2 MediumMay 6, 2024
• bytecodealliance webassembly micro runtime Bytecode Alliance wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) before 1.3.0 can... CVE-2023-52284 Fix available 5.5 MediumDecember 31, 2023
• bytecodealliance webassembly micro runtime An heap overflow vulnerability was discovered in Bytecode alliance wasm-micro-runtime v.1.2.3... CVE-2023-48105 Fix available 7.5 HighNovember 22, 2023