Vendors / WebAssembly Records 46 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 7 CVSS 7.0–8.9
Exploited now WebAssembly records in CISA KEV No WebAssembly vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 72
An issue in wasm2c 1.0.32, wasm2wat 1.0.32, wasm-decompile 1.0.32, and wasm-validate 1.0.32 allows attackers to cause a Denial of Service (DoS) via running a crafted binary.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00833 · Published 2023-05-23 · Will not fix
Priority MEDIUM 60
WebAssembly wat2wasm v1.0.32 allows attackers to cause a libc++abi.dylib crash by putting '@' before a quote (").
CVSS 3.1 MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00284 · Published 2023-05-23 · No fix listed CWE-116
Priority MEDIUM 58
WebAssembly wabt 1.0.33 contains an Out-of-Bound Memory Write in DataSegment::Drop(), which lead to segmentation fault.
CVSS 3.1 MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00293 · Published 2023-10-23 · No fix listed CWE-787
Priority MEDIUM 58
WebAssembly wabt 1.0.33 has an Out-of-Bound Memory Read in in DataSegment::IsValidRange(), which lead to segmentation fault.
CVSS 3.1 MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00222 · Published 2023-10-23 · No fix listed CWE-125
Priority MEDIUM 45
A vulnerability classified as problematic was found in WebAssembly wabt 1.0.36.
CVSS 4.0 LOW 2.3· Network · No auth · User interaction · EPSS 0.00614 · Published 2025-04-02 · No fix listed CWE-404
Open these records in search → All records by CVSS severity
Critical0 High7 Medium37 Low2 No CVSS0