WebAssembly vulnerabilities
12 published CVEs name WebAssembly among the affected products.
- 12Published CVEs12 of them scored
- 6Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-90648
wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack. It does…
WebAssembly · wabt
High7.1 - CVE-2026-8257
WebAssembly Binaryen BrOn wasm-ir-builder.cpp makeBrOn assertion
WebAssembly · Binaryen
Medium4.8 - CVE-2025-15412
WebAssembly wabt wasm-decompile VarName out-of-bounds
WebAssembly · wabt
Medium4.8 - CVE-2025-15411
WebAssembly wabt wasm-decompile InsertNode memory corruption
WebAssembly · wabt
Medium4.8 - CVE-2025-14957
WebAssembly Binaryen IRBuilder wasm-ir-builder.cpp makeLocalTee null pointer dereference
WebAssembly · Binaryen
Medium4.8 - CVE-2025-14956
WebAssembly Binaryen wasm-binary.cpp readExport heap-based overflow
WebAssembly · Binaryen
Medium4.8 - CVE-2025-6275
WebAssembly wabt binary-reader-interp.cc GetFuncOffset use after free
WebAssembly · wabt
Medium4.8 - CVE-2025-6274
WebAssembly wabt binary-reader-interp.cc OnDataCount resource consumption
WebAssembly · wabt
Medium4.8 - CVE-2025-6273
WebAssembly wabt binary-reader-objdump.cc LogOpcode assertion
WebAssembly · wabt
Medium4.8 - CVE-2025-3122
WebAssembly wabt binary-reader-interp.cc BeginFunctionBody null pointer dereference
WebAssembly · wabt
Low2.3