{"items":[{"id":"CVE-2026-54912","published":"2026-11-05T17:29:18.708Z","updated":"2026-11-05T18:44:51.857Z","title":"WAMR fast interpreter loader heap buffer overflow via constant deduplication mismatch","severity":"HIGH","score":8.8,"vendor":"bytecodealliance","product":"wasm-micro-runtime","kev":false,"epss":0.00451,"kevAdded":null},{"id":"CVE-2026-54913","published":"2026-11-05T17:28:26.923Z","updated":"2026-11-05T17:28:26.923Z","title":"WebAssembly Micro Runtime: Missing `ref.null` heap-type validation in `load_init_expr` leaks host stack memory to the WebAssembly guest","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasm-micro-runtime","kev":false,"epss":0.00301,"kevAdded":null},{"id":"CVE-2026-54914","published":"2026-11-05T17:27:16.493Z","updated":"2026-11-05T17:27:16.493Z","title":"WebAssembly Micro Runtime: Heap Buffer Overflow in WAMR WASI poll_oneoff Output Buffer","severity":"HIGH","score":8.3,"vendor":"bytecodealliance","product":"wasm-micro-runtime","kev":false,"epss":0.00399,"kevAdded":null},{"id":"CVE-2026-121441","published":"2026-11-03T14:28:31.931Z","updated":"2026-11-03T16:57:45.823Z","title":"Wasmtime before 36.0.19, 37.0.0 before 48.0.7, and 49.0.0 before 49.0.4 wasi-http Request Smuggling","severity":"MEDIUM","score":6.3,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00224,"kevAdded":null},{"id":"CVE-2026-121440","published":"2026-11-03T14:28:31.228Z","updated":"2026-11-03T18:28:48.629Z","title":"Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 Forwarded Trailers Header Filter Bypass","severity":"MEDIUM","score":6.3,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00224,"kevAdded":null},{"id":"CVE-2026-121439","published":"2026-11-03T14:28:30.570Z","updated":"2026-11-03T14:28:30.570Z","title":"Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 HTTP Response Splitting via wasi-http","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00193,"kevAdded":null},{"id":"CVE-2026-119143","published":"2026-10-29T15:58:21.991Z","updated":"2026-11-04T01:29:32.979Z","title":"Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic via Zero-Length Stream Writes","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00212,"kevAdded":null},{"id":"CVE-2026-119142","published":"2026-10-29T15:58:21.265Z","updated":"2026-10-29T20:12:57.319Z","title":"Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via call_async Drop","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00254,"kevAdded":null},{"id":"CVE-2026-119141","published":"2026-10-29T15:58:20.531Z","updated":"2026-10-29T17:14:25.649Z","title":"Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via realloc","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00372,"kevAdded":null},{"id":"CVE-2026-119140","published":"2026-10-29T15:58:19.800Z","updated":"2026-11-03T16:01:54.434Z","title":"Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via thread.yield","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00208,"kevAdded":null},{"id":"CVE-2026-119139","published":"2026-10-29T15:58:19.056Z","updated":"2026-11-04T01:29:04.755Z","title":"Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via Func::call","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00208,"kevAdded":null},{"id":"CVE-2026-119138","published":"2026-10-29T15:58:18.284Z","updated":"2026-10-29T20:13:38.106Z","title":"Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic After Trap","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00254,"kevAdded":null},{"id":"CVE-2026-119137","published":"2026-10-29T15:58:17.461Z","updated":"2026-10-29T17:14:32.292Z","title":"Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Stack Overflow via Type Registry","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00399,"kevAdded":null},{"id":"CVE-2026-119136","published":"2026-10-29T15:58:16.692Z","updated":"2026-11-03T15:59:56.893Z","title":"Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Async-Entrypoint Enforcement Bypass","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00208,"kevAdded":null},{"id":"CVE-2026-119135","published":"2026-10-29T15:58:15.914Z","updated":"2026-11-04T01:28:06.668Z","title":"Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic via StreamReader Type Mismatch","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00208,"kevAdded":null},{"id":"CVE-2026-119134","published":"2026-10-29T15:58:15.105Z","updated":"2026-10-29T20:14:16.506Z","title":"Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 Unbounded Memory Growth via Component-Model Resource Handles","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00153,"kevAdded":null},{"id":"CVE-2026-119133","published":"2026-10-29T15:58:14.355Z","updated":"2026-10-29T17:14:39.514Z","title":"Wasmtime 47.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Misaligned VMContext via Exception Tags","severity":"LOW","score":2.1,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.0021,"kevAdded":null},{"id":"CVE-2026-119132","published":"2026-10-29T15:58:13.552Z","updated":"2026-11-03T15:55:15.048Z","title":"Wasmtime 49.0.0 before 49.0.3 Host Panic via Overlapping String Transcode in Fused Adapter","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00212,"kevAdded":null},{"id":"CVE-2026-119131","published":"2026-10-29T15:58:12.765Z","updated":"2026-11-04T01:27:13.719Z","title":"Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via wasi-http","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00304,"kevAdded":null},{"id":"CVE-2026-119130","published":"2026-10-29T15:58:12.004Z","updated":"2026-10-29T20:14:54.045Z","title":"Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 HTTP Request Target Smuggling","severity":"LOW","score":2.1,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00236,"kevAdded":null},{"id":"CVE-2026-118688","published":"2026-10-28T18:59:56.965Z","updated":"2026-11-04T15:08:13.222Z","title":"Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 Sandbox Escape via Symlink Rename","severity":"HIGH","score":8.8,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00242,"kevAdded":null},{"id":"CVE-2026-115893","published":"2026-10-23T21:29:33.917Z","updated":"2026-10-29T18:20:01.899Z","title":"Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction","severity":"CRITICAL","score":9.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.0099,"kevAdded":null},{"id":"CVE-2026-115892","published":"2026-10-23T21:26:54.528Z","updated":"2026-10-29T14:44:33.323Z","title":"Wasmtime: Panic lowering a host-created component model stream into a guest that expects a different payload type","severity":"MEDIUM","score":5.7,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00434,"kevAdded":null},{"id":"CVE-2026-115889","published":"2026-10-23T21:23:27.669Z","updated":"2026-10-26T17:42:15.319Z","title":"Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation","severity":"CRITICAL","score":9.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00454,"kevAdded":null},{"id":"CVE-2026-115393","published":"2026-10-22T19:13:59.314Z","updated":"2026-10-29T12:16:18.355Z","title":"Wasmtime before 24.0.12, 25.0.0 before 36.0.13, 37.0.0 before 46.0.2, and 47.0.0 before 47.0.3 Cross-Engine Type Confusion","severity":"LOW","score":1,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2026-115392","published":"2026-10-22T19:13:58.512Z","updated":"2026-10-29T02:32:06.275Z","title":"Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 Sandbox Escape via Trailing Slashes","severity":"HIGH","score":8.8,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00242,"kevAdded":null},{"id":"CVE-2026-115391","published":"2026-10-22T19:13:57.752Z","updated":"2026-11-04T15:13:21.840Z","title":"Wasmtime 46.0.0 before 46.0.3 and 47.0.0 before 47.0.4 Unbounded Heap Allocation via WASIp3 Streams","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00172,"kevAdded":null},{"id":"CVE-2026-115390","published":"2026-10-22T19:13:55.910Z","updated":"2026-10-23T15:00:44.401Z","title":"Wasmtime 47.0.0 before 48.0.3 and 49.0.0 before 49.0.1 Fuel Accounting Bypass DoS","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00242,"kevAdded":null},{"id":"CVE-2026-115389","published":"2026-10-22T19:13:55.163Z","updated":"2026-10-29T12:12:04.439Z","title":"Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 Denial of Service via Val API","severity":"LOW","score":1,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00153,"kevAdded":null},{"id":"CVE-2026-115388","published":"2026-10-22T19:13:54.430Z","updated":"2026-10-29T02:31:21.887Z","title":"Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 Memory Exhaustion DoS via wasmtime-wasi-http Outgoing Body Write","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00112,"kevAdded":null},{"id":"CVE-2026-115387","published":"2026-10-22T19:13:53.696Z","updated":"2026-11-04T15:09:34.734Z","title":"Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 Host Panic via WASI Filesystem Timestamp Overflow","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00112,"kevAdded":null},{"id":"CVE-2026-115386","published":"2026-10-22T19:13:52.931Z","updated":"2026-10-23T15:00:52.816Z","title":"Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Memory Disclosure via fd_readdir","severity":"LOW","score":2.1,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00197,"kevAdded":null},{"id":"CVE-2026-115385","published":"2026-10-22T19:13:52.184Z","updated":"2026-10-26T19:38:29.749Z","title":"Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Host Panic via WASIp3 Timestamps","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00112,"kevAdded":null},{"id":"CVE-2026-115384","published":"2026-10-22T19:13:51.422Z","updated":"2026-10-29T02:30:40.462Z","title":"Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Stack Buffer Overflow","severity":"CRITICAL","score":9.4,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00312,"kevAdded":null},{"id":"CVE-2026-115383","published":"2026-10-22T19:13:50.687Z","updated":"2026-11-04T15:10:40.456Z","title":"Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via Tag Imports","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00184,"kevAdded":null},{"id":"CVE-2026-115382","published":"2026-10-22T19:13:49.956Z","updated":"2026-10-23T15:01:00.837Z","title":"Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 wasi:http Zero Timeout Panic DoS","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00276,"kevAdded":null},{"id":"CVE-2026-115381","published":"2026-10-22T19:13:49.244Z","updated":"2026-10-26T19:38:29.893Z","title":"Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Unbounded Host Memory Allocation via SinkOutputStream write-zeroes","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00212,"kevAdded":null},{"id":"CVE-2026-115380","published":"2026-10-22T19:13:48.469Z","updated":"2026-10-26T19:38:30.038Z","title":"Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Fuel Limit Bypass DoS via WASI Preview 0 poll_oneoff","severity":"MEDIUM","score":5.1,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00118,"kevAdded":null},{"id":"CVE-2026-115379","published":"2026-10-22T19:13:47.737Z","updated":"2026-11-04T15:12:18.112Z","title":"Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via try_call","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00278,"kevAdded":null},{"id":"CVE-2026-104855","published":"2026-10-02T17:37:50.941Z","updated":"2026-10-06T16:38:35.157Z","title":"Wasmtime: Preemption and traps during bulk operations enable breaking internal VM state","severity":"LOW","score":2,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00276,"kevAdded":null},{"id":"CVE-2026-58494","published":"2026-07-08T20:22:16.039Z","updated":"2026-07-09T13:28:57.055Z","title":"Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination","severity":"MEDIUM","score":6.5,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00171,"kevAdded":null},{"id":"CVE-2026-54786","published":"2026-07-01T20:12:35.560Z","updated":"2026-07-02T12:44:55.431Z","title":"Wasmtime: Leak in WASIp1 `fd_renumber` implementation","severity":"LOW","score":2.3,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00367,"kevAdded":null},{"id":"CVE-2026-47261","published":"2026-06-15T19:47:40.366Z","updated":"2026-06-16T12:46:04.260Z","title":"Wasmtime: WASI path_open(TRUNCATE) bypasses `FilePerms::WRITE` host restriction","severity":"HIGH","score":7.5,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00357,"kevAdded":null},{"id":"CVE-2026-44216","published":"2026-05-14T14:54:32.975Z","updated":"2026-07-28T12:04:48.026Z","title":"Wasmtime: Panic when allocating a table exceeding the size of the host's address space","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00319,"kevAdded":null},{"id":"CVE-2026-35195","published":"2026-04-09T18:55:56.467Z","updated":"2026-04-13T15:38:27.294Z","title":"Wasmtime has an out-of-bounds write or crash when transcoding component model strings","severity":"MEDIUM","score":6.1,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00224,"kevAdded":null},{"id":"CVE-2026-35186","published":"2026-04-09T18:54:48.760Z","updated":"2026-04-13T20:18:21.954Z","title":"Wasmtime has an improperly masked return value from `table.grow` with Winch compiler backend","severity":"MEDIUM","score":6.1,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00222,"kevAdded":null},{"id":"CVE-2026-34988","published":"2026-04-09T18:52:26.131Z","updated":"2026-04-09T19:31:07.544Z","title":"Wasmtime leaks data between pooling allocator instances","severity":"LOW","score":2.3,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00297,"kevAdded":null},{"id":"CVE-2026-34987","published":"2026-04-09T18:48:33.552Z","updated":"2026-04-10T14:12:55.374Z","title":"Wasmtime with Winch compiler backend on aarch64 may allow a sandbox-escaping memory access","severity":"CRITICAL","score":9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00283,"kevAdded":null},{"id":"CVE-2026-34983","published":"2026-04-09T18:47:26.575Z","updated":"2026-04-13T15:38:33.779Z","title":"Wasmtime has a use-after-free bug after cloning `wasmtime::Linker`","severity":"LOW","score":1,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00121,"kevAdded":null},{"id":"CVE-2026-34971","published":"2026-04-09T18:45:44.819Z","updated":"2026-07-15T01:03:31.309Z","title":"Wasmtime miscompiled guest heap access enables sandbox escape on aarch64 Cranelift","severity":"CRITICAL","score":9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00324,"kevAdded":null},{"id":"CVE-2026-34946","published":"2026-04-09T18:43:39.137Z","updated":"2026-04-09T19:33:33.709Z","title":"Wasmtime's host panics when Winch compiler executes `table.fill`","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00372,"kevAdded":null},{"id":"CVE-2026-34945","published":"2026-04-09T18:40:48.446Z","updated":"2026-04-10T14:12:18.460Z","title":"Wasmtime leaks host data with 64-bit tables and Winch","severity":"LOW","score":2.3,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00336,"kevAdded":null},{"id":"CVE-2026-34944","published":"2026-04-09T18:38:16.182Z","updated":"2026-04-13T15:38:40.634Z","title":"Wasmtime segfault or unused out-of-sandbox load with `f64x2.splat` operator on x86-64","severity":"MEDIUM","score":4.1,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00236,"kevAdded":null},{"id":"CVE-2026-34943","published":"2026-04-09T18:36:51.370Z","updated":"2026-04-13T20:15:23.994Z","title":"Wasmtime panics when lifting `flags` component value","severity":"MEDIUM","score":5.6,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00336,"kevAdded":null},{"id":"CVE-2026-34942","published":"2026-04-09T18:32:56.456Z","updated":"2026-04-09T19:36:13.614Z","title":"Wasmtime panics when transcoding misaligned utf-16 strings","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00368,"kevAdded":null},{"id":"CVE-2026-34941","published":"2026-04-09T18:29:30.730Z","updated":"2026-04-10T14:11:52.558Z","title":"Wasmtime has a Heap OOB read in component model UTF-16 to latin1+utf16 string transcoding","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.0039,"kevAdded":null},{"id":"CVE-2026-27572","published":"2026-02-24T21:31:50.186Z","updated":"2026-02-27T20:55:29.879Z","title":"Wasmtime can panic when adding excessive fields to a `wasi:http/types.fields` instance","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00519,"kevAdded":null},{"id":"CVE-2026-27204","published":"2026-02-24T21:23:47.007Z","updated":"2026-02-27T20:54:48.839Z","title":"Wasmtime WASI implementations are vulnerable to guest-controlled resource exhaustion","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00404,"kevAdded":null},{"id":"CVE-2026-27195","published":"2026-02-24T21:15:20.366Z","updated":"2026-02-24T21:36:54.122Z","title":"Wasmtime is vulnerable to panic when dropping a `[Typed]Func::call_async` future","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00412,"kevAdded":null},{"id":"CVE-2026-24116","published":"2026-01-27T18:58:52.349Z","updated":"2026-01-27T19:23:09.391Z","title":"Wasmtime segfault or unused out-of-sandbox load with f64.copysign operator on x86-64","severity":"MEDIUM","score":4.1,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00246,"kevAdded":null},{"id":"CVE-2025-64713","published":"2025-11-25T22:13:47.662Z","updated":"2025-11-26T14:50:41.885Z","title":"WebAssembly Micro Runtime frame_offset_bottom array bounds overflow in fast Interpreter mode when handling GET_GLOBAL(I32) followed by if opcode","severity":"MEDIUM","score":5.1,"vendor":"bytecodealliance","product":"wasm-micro-runtime","kev":false,"epss":0.00351,"kevAdded":null},{"id":"CVE-2025-64704","published":"2025-11-25T22:06:46.582Z","updated":"2025-11-26T16:03:41.819Z","title":"WebAssembly Micro Runtime vulnerable to a segmentation fault in v128.store instruction","severity":"MEDIUM","score":4.7,"vendor":"bytecodealliance","product":"wasm-micro-runtime","kev":false,"epss":0.00202,"kevAdded":null},{"id":"CVE-2025-64345","published":"2025-11-12T21:25:50.832Z","updated":"2025-11-12T21:40:37.909Z","title":"Wasmtime provides unsound API access to a WebAssembly shared linear memory","severity":"LOW","score":1.8,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00116,"kevAdded":null},{"id":"CVE-2025-62711","published":"2025-10-24T21:54:52.578Z","updated":"2025-10-27T15:22:22.914Z","title":"Wasmtime vulnerable to segfault when using component resources","severity":"LOW","score":2.1,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.0041,"kevAdded":null},{"id":"CVE-2025-61670","published":"2025-10-07T18:49:53.869Z","updated":"2025-10-07T19:16:40.499Z","title":"Wasmtime has memory leak in C API with `externref` and `anyref` types","severity":"LOW","score":1,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00195,"kevAdded":null},{"id":"CVE-2025-58749","published":"2025-09-16T15:53:35.345Z","updated":"2025-09-16T16:12:35.589Z","title":"WAMR runtime hangs or crashes with large memory.fill addresses in LLVM-JIT mode","severity":"LOW","score":2.1,"vendor":"bytecodealliance","product":"wasm-micro-runtime","kev":false,"epss":0.00369,"kevAdded":null},{"id":"CVE-2025-54126","published":"2025-07-29T21:52:36.253Z","updated":"2025-07-30T18:12:22.511Z","title":"WebAssembly Micro Runtime's `--addr-pool` option allows all IPv4 addresses when subnet mask is not specified","severity":"MEDIUM","score":6.9,"vendor":"bytecodealliance","product":"wasm-micro-runtime","kev":false,"epss":0.00723,"kevAdded":null},{"id":"CVE-2025-53901","published":"2025-07-18T17:10:11.815Z","updated":"2025-07-18T17:31:45.514Z","title":"Wasmtime has host panic with `fd_renumber` WASIp1 function","severity":"LOW","score":3.5,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00381,"kevAdded":null},{"id":"CVE-2025-43853","published":"2025-05-15T17:13:11.825Z","updated":"2025-05-15T18:05:18.829Z","title":"iwasm vulnerable to filesystem sandbox escape with symlink when using uvwasi feature","severity":"HIGH","score":7,"vendor":"bytecodealliance","product":"wasm-micro-runtime","kev":false,"epss":0.00293,"kevAdded":null},{"id":"CVE-2024-51756","published":"2024-11-05T22:06:10.098Z","updated":"2024-11-06T14:39:54.948Z","title":"cap-std doesn't fully sandbox all the Windows device filenames","severity":"LOW","score":2.3,"vendor":"bytecodealliance","product":"cap-std","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2024-51745","published":"2024-11-05T21:09:43.943Z","updated":"2024-11-05T21:28:34.001Z","title":"Wasmtime doesn't fully sandbox all the Windows device filenames","severity":"LOW","score":2.3,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00836,"kevAdded":null},{"id":"CVE-2024-47813","published":"2024-10-09T18:07:49.686Z","updated":"2024-10-09T19:43:53.508Z","title":"Wasmtime race condition could lead to WebAssembly control-flow integrity and type safety violations","severity":"LOW","score":2.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00153,"kevAdded":null},{"id":"CVE-2024-47763","published":"2024-10-09T18:03:33.944Z","updated":"2024-10-09T19:50:25.886Z","title":"Wasmtime runtime crash when combining tail calls with trapping imports","severity":"MEDIUM","score":5.5,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00245,"kevAdded":null},{"id":"CVE-2024-43806","published":"2024-08-26T18:43:22.626Z","updated":"2024-08-26T19:40:46.911Z","title":"`rustix::fs::Dir` iterator with the `linux_raw` backend can cause memory explosion","severity":"MEDIUM","score":6.5,"vendor":"bytecodealliance","product":"rustix","kev":false,"epss":0.0048,"kevAdded":null},{"id":"CVE-2024-30266","published":"2024-04-04T15:42:00.200Z","updated":"2024-08-02T01:32:07.072Z","title":"Wasmtime vulnerable to panic when using a dropped extenref-typed element segment","severity":"LOW","score":3.3,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.0032,"kevAdded":null},{"id":"CVE-2023-41880","published":"2023-09-15T19:43:41.850Z","updated":"2024-09-24T18:13:31.648Z","title":"Miscompilation of wasm `i64x2.shr_s` instruction with constant input on x86_64","severity":"LOW","score":2.2,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00672,"kevAdded":null},{"id":"CVE-2023-30624","published":"2023-04-27T16:56:49.971Z","updated":"2025-01-30T19:33:32.271Z","title":"Wasmtime has Undefined Behavior in Rust runtime functions","severity":"LOW","score":3.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.0045,"kevAdded":null},{"id":"CVE-2023-26489","published":"2023-03-08T19:59:57.419Z","updated":"2025-02-25T14:59:40.063Z","title":"Guest-controlled out-of-bounds read/write on x86_64 in wasmtime","severity":"CRITICAL","score":10,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.01251,"kevAdded":null},{"id":"CVE-2023-27477","published":"2023-03-08T00:00:00.000Z","updated":"2025-02-25T14:59:59.689Z","title":"wasmtime is a fast and secure runtime for WebAssembly. Wasmtime's code generation backend, Cranelift, has a bug on x86_64 platforms for the WebAssembly…","severity":"LOW","score":3.1,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00624,"kevAdded":null},{"id":"CVE-2022-39394","published":"2022-11-10T00:00:00.000Z","updated":"2025-04-23T16:39:05.163Z","title":"wasmtime_trap_code C API function has out of bounds write vulnerability","severity":"LOW","score":3.8,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00354,"kevAdded":null},{"id":"CVE-2022-39393","published":"2022-11-10T00:00:00.000Z","updated":"2025-05-02T12:51:28.525Z","title":"Wasmtime vulnerable to data leakage between instances in the pooling allocator","severity":"HIGH","score":8.6,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00754,"kevAdded":null},{"id":"CVE-2022-39392","published":"2022-11-10T00:00:00.000Z","updated":"2025-04-23T16:39:17.281Z","title":"Wasmtime vulnerable to out of bounds read/write with zero-memory-pages configuration","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00663,"kevAdded":null},{"id":"CVE-2022-31169","published":"2022-07-21T13:50:11.000Z","updated":"2025-04-23T17:57:39.563Z","title":"Cranelift vulnerable to miscompilation of constant values in division on AArch64","severity":"MEDIUM","score":5.9,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00924,"kevAdded":null},{"id":"CVE-2022-31146","published":"2022-07-20T22:30:16.000Z","updated":"2025-04-23T17:57:59.088Z","title":"Use After Free in Wasmtime","severity":"MEDIUM","score":6.4,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.0125,"kevAdded":null},{"id":"CVE-2022-31104","published":"2022-06-27T23:20:13.000Z","updated":"2025-04-23T18:06:10.136Z","title":"Miscompilation of `i8x16.swizzle` and `select` with v128 inputs in Wasmtime","severity":"MEDIUM","score":4.8,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.01785,"kevAdded":null},{"id":"CVE-2022-24791","published":"2022-03-31T23:00:15.000Z","updated":"2025-04-23T18:42:35.778Z","title":"Use after free in Wasmtime","severity":"HIGH","score":8.1,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.01179,"kevAdded":null},{"id":"CVE-2022-23636","published":"2022-02-16T22:00:10.000Z","updated":"2025-04-23T19:03:01.219Z","title":"Invalid drop of partially-initialized instances in wasmtime","severity":"MEDIUM","score":5.1,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00772,"kevAdded":null},{"id":"CVE-2021-43790","published":"2021-11-29T23:55:10.000Z","updated":"2024-08-04T04:03:08.681Z","title":"Use After Free in lucet","severity":"HIGH","score":8.5,"vendor":"bytecodealliance","product":"lucet","kev":false,"epss":0.01617,"kevAdded":null},{"id":"CVE-2021-39218","published":"2021-09-17T20:10:19.000Z","updated":"2024-08-04T01:58:18.261Z","title":"Out-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime","severity":"MEDIUM","score":6.3,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.003,"kevAdded":null},{"id":"CVE-2021-39219","published":"2021-09-17T20:10:13.000Z","updated":"2024-08-04T01:58:18.272Z","title":"Wrong type for `Linker`-define functions when used across two `Engine`s","severity":"MEDIUM","score":6.3,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00361,"kevAdded":null},{"id":"CVE-2021-39216","published":"2021-09-17T20:05:11.000Z","updated":"2024-08-04T01:58:18.335Z","title":"Use after free passing `externref`s to Wasm in Wasmtime","severity":"MEDIUM","score":6.3,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00307,"kevAdded":null},{"id":"CVE-2021-32629","published":"2021-05-24T15:35:11.000Z","updated":"2024-08-03T23:25:30.928Z","title":"Memory access due to code generation flaw in Cranelift module","severity":"HIGH","score":7.2,"vendor":"bytecodealliance","product":"wasmtime","kev":false,"epss":0.00455,"kevAdded":null}]}