Webassembly vulnerabilities

Products

• Binaryen 25
• Wabt 13
• Binary Toolkit 5
• Webassembly 3

Newest

• webassembly wabt wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily... CVE-2026-90648 Fix available 7.1 HighSeptember 12, 2026
• webassembly binaryen WebAssembly Binaryen BrOn wasm-ir-builder.cpp makeBrOn assertion CVE-2026-8257 Fix available 4.8 MediumMay 11, 2026
• webassembly wabt WebAssembly wabt wasm-decompile VarName out-of-bounds CVE-2025-15412 4.8 MediumJanuary 1, 2026
• webassembly wabt WebAssembly wabt wasm-decompile InsertNode memory corruption CVE-2025-15411 4.8 MediumJanuary 1, 2026
• webassembly binaryen WebAssembly Binaryen IRBuilder wasm-ir-builder.cpp makeLocalTee null pointer dereference CVE-2025-14957 Fix available 4.8 MediumDecember 19, 2025
• webassembly binaryen WebAssembly Binaryen wasm-binary.cpp readExport heap-based overflow CVE-2025-14956 Fix available 4.8 MediumDecember 19, 2025
• webassembly wabt WebAssembly wabt binary-reader-interp.cc GetFuncOffset use after free CVE-2025-6275 4.8 MediumJune 19, 2025
• webassembly wabt WebAssembly wabt binary-reader-interp.cc OnDataCount resource consumption CVE-2025-6274 4.8 MediumJune 19, 2025
• webassembly wabt WebAssembly wabt binary-reader-objdump.cc LogOpcode assertion CVE-2025-6273 Disputed 4.8 MediumJune 19, 2025
• webassembly wabt, binary toolkit +1 more WebAssembly wabt binary-reader-interp.cc BeginFunctionBody null pointer dereference CVE-2025-3122 2.3 LowApril 2, 2025
• webassembly wabt WebAssembly wabt binary-reader-interp.cc GetReturnCallDropKeepCount heap-based overflow CVE-2025-2584 2.3 LowMarch 21, 2025
• webassembly wabt WebAssembly wabt Malformed File binary-reader-interp.cc OnExport heap-based overflow CVE-2025-2368 5.3 MediumMarch 17, 2025
• webassembly binary toolkit WebAssembly wabt 1.0.33 contains an Out-of-Bound Memory Write in DataSegment::Drop(), which lead... CVE-2023-46332 5.5 MediumOctober 23, 2023
• webassembly binary toolkit WebAssembly wabt 1.0.33 has an Out-of-Bound Memory Read in in DataSegment::IsValidRange(), which... CVE-2023-46331 5.5 MediumOctober 23, 2023
• webassembly binaryen Heap-buffer-overflow in /src/wasm/wasm-binary.cpp in wasm::WasmBinaryBuilder::visitBlock(wasm:... CVE-2020-18382 Fix available 6.5 MediumAugust 22, 2023
• webassembly binaryen A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s... CVE-2020-18378 Fix available 6.5 MediumAugust 22, 2023
• webassembly binary toolkit An issue in wasm2c 1.0.32, wasm2wat 1.0.32, wasm-decompile 1.0.32, and wasm-validate 1.0.32... CVE-2023-31670 Fix available 7.5 HighMay 23, 2023
• webassembly binary toolkit WebAssembly wat2wasm v1.0.32 allows attackers to cause a libc++abi.dylib crash by putting '@'... CVE-2023-31669 Fix available 5.5 MediumMay 23, 2023
• webassembly wabt WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt:... CVE-2023-27119 5.5 MediumMarch 10, 2023
• webassembly WebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt:... CVE-2023-27117 7.8 HighMarch 10, 2023
• webassembly WebAssembly v1.0.29 discovered to contain an abort in CWriter::MangleType. CVE-2023-27116 Fix available 5.5 MediumMarch 10, 2023
• webassembly WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt:... CVE-2023-27115 5.5 MediumMarch 10, 2023
• webassembly wabt wasm2c v1.0.29 was discovered to contain an abort in CWriter::Write. CVE-2022-43283 Fix available 5.5 MediumOctober 28, 2022
• webassembly wabt wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component... CVE-2022-43282 Fix available 7.1 HighOctober 28, 2022
• webassembly wasm wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector<wabt:... CVE-2022-43281 Fix available 7.8 HighOctober 28, 2022
• webassembly wabt wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component... CVE-2022-43280 Fix available 7.1 HighOctober 28, 2022
• webassembly binaryen A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm:... CVE-2021-46055 5.5 MediumJanuary 7, 2022
• webassembly binaryen A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm:... CVE-2021-46054 5.5 MediumJanuary 7, 2022
• webassembly binaryen A Denial of Service vulnerability exists in Binaryen 103. The program terminates with signal... CVE-2021-46053 5.5 MediumJanuary 7, 2022
• webassembly binaryen A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::Tuple... CVE-2021-46052 5.5 MediumJanuary 7, 2022
• webassembly binaryen A Stack Overflow vulnerability exists in Binaryen 103 via the printf_common function. CVE-2021-46050 5.5 MediumJanuary 7, 2022
• webassembly binaryen A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm:... CVE-2021-46048 5.5 MediumJanuary 7, 2022
• webassembly binaryen, fedoraproject fedora +1 more A Denial of Service vulnerability exists in Binaryen 103 due to an Invalid memory address... CVE-2021-45293 Fix available 5.5 MediumDecember 21, 2021
• webassembly binaryen, fedoraproject fedora +1 more A Denial of Service vulnerability exits in Binaryen 103 due to an assertion abort in wasm:... CVE-2021-45290 Fix available 7.5 HighDecember 21, 2021
• webassembly binaryen An issue was discovered in Binaryen 1.38.32. Missing validation rules in asmjs/asmangle.cpp can... CVE-2019-15758 Fix available 6.5 MediumAugust 29, 2019
• webassembly binaryen An issue was discovered in Binaryen 1.38.32. Two visitors in ir/ExpressionManipulator.cpp can... CVE-2019-15759 Fix available 6.5 MediumAugust 29, 2019
• webassembly binaryen wasm::WasmBinaryBuilder::readUserSection in wasm-binary.cpp in Binaryen 1.38.22 triggers an... CVE-2019-7704 Fix available 6.5 MediumFebruary 10, 2019
• webassembly binaryen In Binaryen 1.38.22, there is a use-after-free problem in wasm::WasmBinaryBuilder::visitCall in... CVE-2019-7703 Fix available 6.5 MediumFebruary 10, 2019
• webassembly binaryen A NULL pointer dereference was discovered in wasm::SExpressionWasmBuilder::parseExpression in... CVE-2019-7702 Fix available 6.5 MediumFebruary 10, 2019
• webassembly binaryen A heap-based buffer over-read was discovered in wasm::SExpressionParser::skipWhitespace() in wasm... CVE-2019-7701 Fix available 6.5 MediumFebruary 10, 2019
• webassembly binaryen A heap-based buffer over-read was discovered in wasm::WasmBinaryBuilder::visitCall in wasm-binary... CVE-2019-7700 Fix available 6.5 MediumFebruary 10, 2019
• webassembly binaryen An assertion failure was discovered in wasm::WasmBinaryBuilder::getType() in wasm-binary.cpp in... CVE-2019-7662 Fix available 6.5 MediumFebruary 9, 2019
• webassembly binaryen The main function in tools/wasm2js.cpp in Binaryen 1.38.22 has a heap-based buffer overflow... CVE-2019-7154 Fix available 6.5 MediumJanuary 29, 2019
• webassembly binaryen A NULL pointer dereference was discovered in wasm::WasmBinaryBuilder::processFunctions() in wasm... CVE-2019-7153 Fix available 6.5 MediumJanuary 29, 2019
• webassembly binaryen A heap-based buffer over-read was discovered in wasm::WasmBinaryBuilder::processFunctions() in... CVE-2019-7152 Fix available 6.5 MediumJanuary 29, 2019
• webassembly binaryen A NULL pointer dereference was discovered in wasm::Module::getFunctionOrNull in wasm/wasm.cpp in... CVE-2019-7151 Fix available 6.5 MediumJanuary 29, 2019