Priority HIGH 72
An issue in wasm2c 1.0.32, wasm2wat 1.0.32, wasm-decompile 1.0.32, and wasm-validate 1.0.32 allows attackers to cause a Denial of Service (DoS) via running a crafted binary.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00833 · Published 2023-05-23 · Will not fix
Priority HIGH 69
WebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt::Node::operator.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00318 · Published 2023-03-10 · No fix listed CWE-787
Priority HIGH 67
wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector<wabt::Type, std::allocator<wabt::Type>>::size() at /bits/stl_vector.h.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00339 · Published 2022-10-28 · No fix listed CWE-787
Priority HIGH 66
wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr->GetReturnCallDropKeepCount.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00322 · Published 2022-10-28 · No fix listed CWE-125
Priority MEDIUM 64
wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack.
CVSS 4.0HIGH 7.1· Local · No auth · No interaction · EPSS 0.00191 · Published 2026-09-12 · No fix listed CWE-252
Priority MEDIUM 64
wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallIndirectExpr->GetReturnCallDropKeepCount.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00324 · Published 2022-10-28 · No fix listed CWE-125
Priority MEDIUM 62
Heap-buffer-overflow in /src/wasm/wasm-binary.cpp in wasm::WasmBinaryBuilder::visitBlock(wasm::Block*) in Binaryen 1.38.26.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00618 · Published 2023-08-22 · No fix listed CWE-787
Priority MEDIUM 62
A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c in Binaryen 1.38.26.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0061 · Published 2023-08-22 · No fix listed CWE-476
Priority MEDIUM 60
WebAssembly wat2wasm v1.0.32 allows attackers to cause a libc++abi.dylib crash by putting '@' before a quote (").
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00284 · Published 2023-05-23 · No fix listed CWE-116
Priority MEDIUM 58
WebAssembly wabt 1.0.33 contains an Out-of-Bound Memory Write in DataSegment::Drop(), which lead to segmentation fault.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00293 · Published 2023-10-23 · No fix listed CWE-787
Priority MEDIUM 58
WebAssembly wabt 1.0.33 has an Out-of-Bound Memory Read in in DataSegment::IsValidRange(), which lead to segmentation fault.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00222 · Published 2023-10-23 · No fix listed CWE-125
Priority MEDIUM 58
WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::Decompiler::WrapChild.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00278 · Published 2023-03-10 · No fix listed
Priority MEDIUM 58
WebAssembly v1.0.29 discovered to contain an abort in CWriter::MangleType.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00285 · Published 2023-03-10 · No fix listed
Priority MEDIUM 58
WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::cat_compute_size.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00308 · Published 2023-03-10 · No fix listed CWE-665
Priority MEDIUM 58
wasm2c v1.0.29 was discovered to contain an abort in CWriter::Write.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00287 · Published 2022-10-28 · No fix listed CWE-434
Priority MEDIUM 57
A vulnerability was found in WebAssembly wabt 1.0.36 and classified as critical.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00574 · Published 2025-03-17 · Will not fix CWE-119
Priority MEDIUM 55
A vulnerability was detected in WebAssembly Binaryen up to 117.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00159 · Published 2026-05-11 · No fix listed CWE-617
Priority MEDIUM 55
A security vulnerability has been detected in WebAssembly wabt up to 1.0.39.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00208 · Published 2026-01-01 · No fix listed CWE-119
Priority MEDIUM 55
A weakness has been identified in WebAssembly wabt up to 1.0.39.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00208 · Published 2026-01-01 · No fix listed CWE-119
Priority MEDIUM 55
A vulnerability was found in WebAssembly wabt up to 1.0.37.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00249 · Published 2025-06-19 · Fix deferred CWE-119
Priority MEDIUM 55
A vulnerability was found in WebAssembly wabt up to 1.0.37.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00236 · Published 2025-06-19 · Fix deferred CWE-400
Priority MEDIUM 55
A vulnerability was found in WebAssembly wabt up to 1.0.37 and classified as problematic.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00235 · Published 2025-06-19 · Fix deferred CWE-617
Priority MEDIUM 45
A vulnerability classified as problematic was found in WebAssembly wabt 1.0.36.
CVSS 4.0LOW 2.3· Network · No auth · User interaction · EPSS 0.00614 · Published 2025-04-02 · No fix listed CWE-404
Priority MEDIUM 45
A vulnerability was found in WebAssembly wabt 1.0.36.
CVSS 4.0LOW 2.3· Network · No auth · User interaction · EPSS 0.0051 · Published 2025-03-21 · Fix deferred CWE-119
Priority LOW 36
A Denial of Service vulnerability exits in Binaryen 103 due to an assertion abort in wasm::handle_unreachable.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01526 · Published 2021-12-21 · No fix listed CWE-617
Load more
THREATIST.IORead the docs