WebAssembly

Records46All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

WebAssembly records in CISA KEV

No WebAssembly vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Binaryen 25 records MEDIUM Wabt 11 records HIGH Webassembly Binary Toolkit 5 records HIGH Webassembly 3 records HIGH Wasm 1 record HIGH

Records

25 records in Binaryen · all components

TI-2020-13374 CVE-2020-18382 · GHSA-g8f7-3qc2-97wh

Heap-buffer-overflow in /src/wasm/wasm-binary.cpp in…

MEDIUM 62

Heap-buffer-overflow in /src/wasm/wasm-binary.cpp in wasm::WasmBinaryBuilder::visitBlock(wasm::Block*) in Binaryen 1.38.26.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00618 Published 2023-08-22 No fix listed CWE-787

TI-2020-13373 CVE-2020-18378 · GHSA-vj54-ff4j-gq2v

A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in…

MEDIUM 62

A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c in Binaryen 1.38.26.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0061 Published 2023-08-22 No fix listed CWE-476

TI-2026-07277 CVE-2026-8257 · GHSA-gmmj-chcc-2f2x

WebAssembly Binaryen BrOn wasm-ir-builder.cpp makeBrOn assertion

MEDIUM 55

A vulnerability was detected in WebAssembly Binaryen up to 117.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00159 Published 2026-05-11 No fix listed CWE-617

TI-2021-20472 CVE-2021-45290 · GHSA-c9pj-gf53-pg7p

A Denial of Service vulnerability exits in Binaryen 103 due to an assertion abort in wasm::handle_unreachable.

LOW 36

A Denial of Service vulnerability exits in Binaryen 103 due to an assertion abort in wasm::handle_unreachable.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01526 Published 2021-12-21 No fix listed CWE-617

TI-2019-05428 CVE-2019-7703 · GHSA-9w62-w3v4-9qmp

In Binaryen 1.38.22, there is a use-after-free problem in…

LOW 32

In Binaryen 1.38.22, there is a use-after-free problem in wasm::WasmBinaryBuilder::visitCall in wasm-binary.cpp.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01459 Published 2019-02-10 No fix listed CWE-416

TI-2019-05400 CVE-2019-7662 · GHSA-5j7p-jhww-xp9m

An assertion failure was discovered in wasm::WasmBinaryBuilder::getType() in…

LOW 32

An assertion failure was discovered in wasm::WasmBinaryBuilder::getType() in wasm-binary.cpp in Binaryen 1.38.22.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01598 Published 2019-02-09 No fix listed CWE-617

TI-2019-11837 CVE-2019-15759 · GHSA-w872-v6x7-99f4

An issue was discovered in Binaryen 1.38.32.

LOW 31

An issue was discovered in Binaryen 1.38.32.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01253 Published 2019-08-29 No fix listed CWE-476

TI-2019-11836 CVE-2019-15758 · GHSA-347v-36v5-8qfm

An issue was discovered in Binaryen 1.38.32.

LOW 31

An issue was discovered in Binaryen 1.38.32.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01242 Published 2019-08-29 No fix listed CWE-617

TI-2019-05429 CVE-2019-7704 · GHSA-7fwv-6gmp-m9x7

wasm::WasmBinaryBuilder::readUserSection in wasm-binary.cpp in Binaryen 1.38.22 triggers…

LOW 31

wasm::WasmBinaryBuilder::readUserSection in wasm-binary.cpp in Binaryen 1.38.22 triggers an attempt at excessive memory allocation, as demonstrated by wasm-merge and wasm-opt.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01163 Published 2019-02-10 No fix listed CWE-770

TI-2019-05427 CVE-2019-7702 · GHSA-hmpj-jpgg-crxm

A NULL pointer dereference was discovered in…

LOW 31

A NULL pointer dereference was discovered in wasm::SExpressionWasmBuilder::parseExpression in wasm-s-parser.cpp in Binaryen 1.38.22.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0115 Published 2019-02-10 No fix listed CWE-476

TI-2019-05426 CVE-2019-7701 · GHSA-w6m3-f6w3-3gw3

A heap-based buffer over-read was discovered in wasm::SExpressionParser::skipWhitespace()…

LOW 31

A heap-based buffer over-read was discovered in wasm::SExpressionParser::skipWhitespace() in wasm-s-parser.cpp in Binaryen 1.38.22.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01153 Published 2019-02-10 No fix listed CWE-125

TI-2019-05425 CVE-2019-7700 · GHSA-ggj8-g5w9-5x4p

A heap-based buffer over-read was discovered in wasm::WasmBinaryBuilder::visitCall in…

LOW 31

A heap-based buffer over-read was discovered in wasm::WasmBinaryBuilder::visitCall in wasm-binary.cpp in Binaryen 1.38.22.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01153 Published 2019-02-10 No fix listed CWE-125

TI-2019-05073 CVE-2019-7154 · GHSA-368j-92cq-wrg5

The main function in tools/wasm2js.cpp in Binaryen 1.38.22 has a heap-based buffer…

LOW 31

The main function in tools/wasm2js.cpp in Binaryen 1.38.22 has a heap-based buffer overflow because Emscripten is misused, triggering an error in cashew::JSPrinter::printAst() in emscripten-optimizer/simple_ast.h.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01118 Published 2019-01-29 No fix listed CWE-787

TI-2019-05072 CVE-2019-7153 · GHSA-9q9j-mm4q-5894

A NULL pointer dereference was discovered in wasm::WasmBinaryBuilder::processFunctions()…

LOW 31

A NULL pointer dereference was discovered in wasm::WasmBinaryBuilder::processFunctions() in wasm/wasm-binary.cpp (when calling wasm::WasmBinaryBuilder::getFunctionIndexName) in Binaryen 1.38.22.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01164 Published 2019-01-29 No fix listed CWE-476

TI-2019-05071 CVE-2019-7152 · GHSA-jg54-xxxc-8446

A heap-based buffer over-read was discovered in…

LOW 31

A heap-based buffer over-read was discovered in wasm::WasmBinaryBuilder::processFunctions() in wasm/wasm-binary.cpp (when calling wasm::WasmBinaryBuilder::getFunctionIndexName) in Binaryen 1.38.22.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01153 Published 2019-01-29 No fix listed CWE-125

TI-2019-05070 CVE-2019-7151 · GHSA-vjrg-p598-42cq

A NULL pointer dereference was discovered in wasm::Module::getFunctionOrNull in…

LOW 31

A NULL pointer dereference was discovered in wasm::Module::getFunctionOrNull in wasm/wasm.cpp in Binaryen 1.38.22.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01151 Published 2019-01-29 No fix listed CWE-476

TI-2021-21031 CVE-2021-46055 · GHSA-8qxr-qg3c-8m2w

A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in…

LOW 26

A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::visitRethrow(wasm::Rethrow*).

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00723 Published 2022-01-07 No fix listed CWE-617

TI-2021-21030 CVE-2021-46054 · GHSA-g79p-2gxh-gx42

A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in…

LOW 26

A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::visitRethrow(wasm::Rethrow*).

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00795 Published 2022-01-07 No fix listed CWE-617

TI-2021-21029 CVE-2021-46053 · GHSA-fmjw-5g5h-xw95

A Denial of Service vulnerability exists in Binaryen 103.

LOW 26

A Denial of Service vulnerability exists in Binaryen 103.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00795 Published 2022-01-07 No fix listed CWE-119

TI-2021-21028 CVE-2021-46052 · GHSA-vv4j-xqg9-j5g3

A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::Tuple::validate.

LOW 26

A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::Tuple::validate.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00795 Published 2022-01-07 No fix listed CWE-617

TI-2021-21026 CVE-2021-46050 · GHSA-x96q-w32v-vmr6

A Stack Overflow vulnerability exists in Binaryen 103 via the printf_common function.

LOW 26

A Stack Overflow vulnerability exists in Binaryen 103 via the printf_common function.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00767 Published 2022-01-07 No fix listed CWE-770

TI-2021-21024 CVE-2021-46048 · GHSA-w48j-3c25-425m

A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in…

LOW 26

A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::readFunctions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00723 Published 2022-01-07 No fix listed CWE-617

TI-2021-20475 CVE-2021-45293 · GHSA-mcjm-q5m8-3xx2

A Denial of Service vulnerability exists in Binaryen 103 due to an Invalid memory address…

LOW 26

A Denial of Service vulnerability exists in Binaryen 103 due to an Invalid memory address dereference in wasm::WasmBinaryBuilder::visitLet.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00802 Published 2021-12-21 No fix listed CWE-119

TI-2025-13642 CVE-2025-14957 · GHSA-3h23-rfwm-gcx3

WebAssembly Binaryen IRBuilder wasm-ir-builder.cpp makeLocalTee null pointer dereference

LOW 21

A vulnerability was identified in WebAssembly Binaryen up to 125.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00213 Published 2025-12-19 No fix listed CWE-404

TI-2025-13641 CVE-2025-14956 · GHSA-vjgx-vcpf-hm6w

WebAssembly Binaryen wasm-binary.cpp readExport heap-based overflow

LOW 21

A vulnerability was determined in WebAssembly Binaryen up to 125.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00215 Published 2025-12-19 No fix listed CWE-119

Open these records in search →

Critical	0
High	7
Medium	37
Low	2
No CVSS	0