{"items":[{"id":"CVE-2026-90648","published":"2026-09-12T23:16:34.123Z","updated":"2026-10-23T19:16:43.958Z","title":"wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a \"table flip\" attack. It does…","severity":"HIGH","score":7.1,"vendor":"WebAssembly","product":"wabt","kev":false,"epss":0.00191,"kevAdded":null},{"id":"CVE-2026-8257","published":"2026-05-11T00:30:13.661Z","updated":"2026-05-11T17:31:23.327Z","title":"WebAssembly Binaryen BrOn wasm-ir-builder.cpp makeBrOn assertion","severity":"MEDIUM","score":4.8,"vendor":"WebAssembly","product":"Binaryen","kev":false,"epss":0.00159,"kevAdded":null},{"id":"CVE-2025-15412","published":"2026-01-01T20:32:06.684Z","updated":"2026-02-23T08:03:40.223Z","title":"WebAssembly wabt wasm-decompile VarName out-of-bounds","severity":"MEDIUM","score":4.8,"vendor":"WebAssembly","product":"wabt","kev":false,"epss":0.00208,"kevAdded":null},{"id":"CVE-2025-15411","published":"2026-01-01T19:32:07.421Z","updated":"2026-02-23T08:03:27.517Z","title":"WebAssembly wabt wasm-decompile InsertNode memory corruption","severity":"MEDIUM","score":4.8,"vendor":"WebAssembly","product":"wabt","kev":false,"epss":0.00208,"kevAdded":null},{"id":"CVE-2025-14957","published":"2025-12-19T17:02:16.843Z","updated":"2026-02-24T05:57:44.642Z","title":"WebAssembly Binaryen IRBuilder wasm-ir-builder.cpp makeLocalTee null pointer dereference","severity":"MEDIUM","score":4.8,"vendor":"WebAssembly","product":"Binaryen","kev":false,"epss":0.00213,"kevAdded":null},{"id":"CVE-2025-14956","published":"2025-12-19T16:32:12.536Z","updated":"2026-02-24T05:57:29.961Z","title":"WebAssembly Binaryen wasm-binary.cpp readExport heap-based overflow","severity":"MEDIUM","score":4.8,"vendor":"WebAssembly","product":"Binaryen","kev":false,"epss":0.00215,"kevAdded":null},{"id":"CVE-2025-6275","published":"2025-06-19T19:31:06.618Z","updated":"2025-06-23T19:30:26.829Z","title":"WebAssembly wabt binary-reader-interp.cc GetFuncOffset use after free","severity":"MEDIUM","score":4.8,"vendor":"WebAssembly","product":"wabt","kev":false,"epss":0.00249,"kevAdded":null},{"id":"CVE-2025-6274","published":"2025-06-19T19:00:16.150Z","updated":"2025-06-23T19:30:32.208Z","title":"WebAssembly wabt binary-reader-interp.cc OnDataCount resource consumption","severity":"MEDIUM","score":4.8,"vendor":"WebAssembly","product":"wabt","kev":false,"epss":0.00236,"kevAdded":null},{"id":"CVE-2025-6273","published":"2025-06-19T18:31:06.692Z","updated":"2025-06-23T19:30:37.748Z","title":"WebAssembly wabt binary-reader-objdump.cc LogOpcode assertion","severity":"MEDIUM","score":4.8,"vendor":"WebAssembly","product":"wabt","kev":false,"epss":0.00235,"kevAdded":null},{"id":"CVE-2025-3122","published":"2025-04-02T22:00:14.705Z","updated":"2025-04-03T19:18:20.492Z","title":"WebAssembly wabt binary-reader-interp.cc BeginFunctionBody null pointer dereference","severity":"LOW","score":2.3,"vendor":"WebAssembly","product":"wabt","kev":false,"epss":0.00614,"kevAdded":null},{"id":"CVE-2025-2584","published":"2025-03-21T07:31:03.732Z","updated":"2025-03-21T12:29:54.383Z","title":"WebAssembly wabt binary-reader-interp.cc GetReturnCallDropKeepCount heap-based overflow","severity":"LOW","score":2.3,"vendor":"WebAssembly","product":"wabt","kev":false,"epss":0.0051,"kevAdded":null},{"id":"CVE-2025-2368","published":"2025-03-17T08:00:05.922Z","updated":"2025-03-17T16:25:00.678Z","title":"WebAssembly wabt Malformed File binary-reader-interp.cc OnExport heap-based overflow","severity":"MEDIUM","score":5.3,"vendor":"WebAssembly","product":"wabt","kev":false,"epss":0.00574,"kevAdded":null}]}