Skip to content

Vulnerabilities of bytecodealliance wasm-micro-runtime

Is your version affected?

CVE Summary Score Published
CVE-2026-54912 WAMR fast interpreter loader heap buffer overflow via constant deduplication mismatch 8.8 High Nov 5, 2026
CVE-2026-54913 WebAssembly Micro Runtime: Missing `ref.null` heap-type validation in `load_init_expr` leaks host stack memory to the WebAssembly guest 6.9 Medium Nov 5, 2026
CVE-2026-54914 WebAssembly Micro Runtime: Heap Buffer Overflow in WAMR WASI poll_oneoff Output Buffer 8.3 High Nov 5, 2026
CVE-2025-64713 WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime 5.1 Medium Nov 25, 2025
CVE-2025-64704 WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime 4.7 Medium Nov 25, 2025
CVE-2025-58749 WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime 2.1 Low Sep 16, 2025
CVE-2025-54126 The WebAssembly Micro Runtime's (WAMR) iwasm package is the executable binary built with WAMR VMcore which supports… 6.9 Medium Jul 29, 2025
CVE-2025-43853 The WebAssembly Micro Runtime's (WAMR) iwasm package is the executable binary built with WAMR VMcore which supports… 7.0 High May 15, 2025

Other bytecodealliance products