Vulnerabilities

TI-2025-14056 CVE-2025-15412 · GHSA-q9fv-9fr9-69p3

WebAssembly wabt wasm-decompile VarName out-of-bounds

MEDIUM 55

A security vulnerability has been detected in WebAssembly wabt up to 1.0.39.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00208 Published 2026-01-01 No fix listed CWE-119

TI-2025-14055 CVE-2025-15411 · GHSA-mw2p-3c2q-3gxg

WebAssembly wabt wasm-decompile InsertNode memory corruption

MEDIUM 55

A weakness has been identified in WebAssembly wabt up to 1.0.39.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00208 Published 2026-01-01 No fix listed CWE-119

TI-2025-05677 CVE-2025-6275 · GHSA-w5x9-mj5j-cp4g

WebAssembly wabt binary-reader-interp.cc GetFuncOffset use after free

MEDIUM 55

A vulnerability was found in WebAssembly wabt up to 1.0.37.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00249 Published 2025-06-19 Fix deferred CWE-119

TI-2025-05676 CVE-2025-6274 · GHSA-2467-jr62-j23f

WebAssembly wabt binary-reader-interp.cc OnDataCount resource consumption

MEDIUM 55

A vulnerability was found in WebAssembly wabt up to 1.0.37.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00236 Published 2025-06-19 Fix deferred CWE-400

TI-2025-05675 CVE-2025-6273 · GHSA-frwp-9m3q-pjc8

WebAssembly wabt binary-reader-objdump.cc LogOpcode assertion

MEDIUM 55

A vulnerability was found in WebAssembly wabt up to 1.0.37 and classified as problematic.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00235 Published 2025-06-19 Fix deferred CWE-617

TI-2025-02252 CVE-2025-2584 · GHSA-7qx5-g5pm-mq66

WebAssembly wabt binary-reader-interp.cc GetReturnCallDropKeepCount heap-based overflow

MEDIUM 45

A vulnerability was found in WebAssembly wabt 1.0.36.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.0051 Published 2025-03-21 Fix deferred CWE-119

TI-2025-02083 CVE-2025-2368 · GHSA-rqch-2mmw-28wc

WebAssembly wabt Malformed File binary-reader-interp.cc OnExport heap-based overflow

MEDIUM 57

A vulnerability was found in WebAssembly wabt 1.0.36 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00574 Published 2025-03-17 Will not fix CWE-119

TI-2023-11935 CVE-2023-27119 · GHSA-wx77-rf27-wqwf

WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::Decompiler::WrapChild.

MEDIUM 58

WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::Decompiler::WrapChild.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00278 Published 2023-03-10 No fix listed

TI-2022-21126 CVE-2022-43283 · GHSA-835w-28hj-65xx

wasm2c v1.0.29 was discovered to contain an abort in CWriter::Write.

MEDIUM 58

wasm2c v1.0.29 was discovered to contain an abort in CWriter::Write.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00287 Published 2022-10-28 No fix listed CWE-434

TI-2022-21125 CVE-2022-43282 · GHSA-wmg6-jwwg-xv57

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component…

MEDIUM 64

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallIndirectExpr->GetReturnCallDropKeepCount.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00324 Published 2022-10-28 No fix listed CWE-125

TI-2022-21123 CVE-2022-43280 · GHSA-gqvv-2phg-pg6g

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component…

HIGH 66

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr->GetReturnCallDropKeepCount.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00322 Published 2022-10-28 No fix listed CWE-125

Vulnerabilities

Filters