Priority HIGH 66
WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime.
Vulnerabilities
11 records
TI-2025-40050 CVE-2025-64704
WebAssembly Micro Runtime vulnerable to a segmentation fault in v128.store instruction
Priority MEDIUM 58
WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime.
TI-2025-36407 CVE-2025-58749
WAMR runtime hangs or crashes with large memory.fill addresses in LLVM-JIT mode
Priority MEDIUM 44
WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime.
TI-2025-33969 CVE-2025-54126
WebAssembly Micro Runtime's `--addr-pool` option allows all IPv4 addresses when subnet mask is not specified
Priority HIGH 70
The WebAssembly Micro Runtime's (WAMR) iwasm package is the executable binary built with WAMR VMcore which supports WebAssembly System Interface (WASI) and command line interface.
TI-2025-28437 CVE-2025-43853
iwasm vulnerable to filesystem sandbox escape with symlink when using uvwasi feature
Priority MEDIUM 64
The WebAssembly Micro Runtime's (WAMR) iwasm package is the executable binary built with WAMR VMcore which supports WebAssembly System Interface (WASI) and command line interface.
TI-2024-18300 CVE-2024-27532 · GHSA-7h2g-q5x6-pwg2
wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) 06df58f is vulnerable to NULL…
Priority HIGH 72
wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) 06df58f is vulnerable to NULL Pointer Dereference in function `block_type_get_result_types.
TI-2024-16741 CVE-2024-25431 · GHSA-gf29-gwj9-7xvj
An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit…
Priority HIGH 73
An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to escalate privileges via a crafted file to the check_was_abi_compatibility function.
TI-2024-22658 CVE-2024-34251 · GHSA-v4vq-27w6-p28p
An out-of-bound memory read vulnerability was discovered in Bytecode Alliance…
Priority HIGH 72
An out-of-bound memory read vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause a denial of service via the "block_type_get_arity" function in core/iwasm/in…
TI-2024-22657 CVE-2024-34250 · GHSA-7wfw-7p9h-4j2c
A heap buffer overflow vulnerability was discovered in Bytecode Alliance…
Priority HIGH 67
A heap buffer overflow vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause at least a denial of service via the "wasm_loader_check_br" function in core/iwas…
TI-2023-28684 CVE-2023-52284 · GHSA-4m88-fhx6-92j5
Bytecode Alliance wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) before 1.3.0…
Priority LOW 25
Bytecode Alliance wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) before 1.3.0 can have an "double free or corruption" error for a valid WebAssembly module because push_pop_frame_ref_offset is mishandled.
TI-2023-26034 CVE-2023-48105 · GHSA-w252-369w-2g4v
An heap overflow vulnerability was discovered in Bytecode alliance wasm-micro-runtime…
Priority HIGH 72
An heap overflow vulnerability was discovered in Bytecode alliance wasm-micro-runtime v.1.2.3 allows a remote attacker to cause a denial of service via the wasm_loader_prepare_bytecode function in core/iwasm/interpreter/…