bytecodealliance Wasmtime Vulnerabilities
Bytecodealliance Wasmtime vulnerabilities.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
WebAssembly Runtime Vulnerability in Wasmtime by Bytecode Alliance
CVE-2025-53901BytecodeallianceWasmtime3.5LOWPatch Releases Issued for Wasmtime to Address Sandbox Bypass Vulnerability
CVE-2024-51745BytecodeallianceWasmtimeMiscompilation of wasm `i64x2.shr_s` instruction with constant input on x86_64
CVE-2023-41880BytecodeallianceWasmtime2.2LOWWasmtime has Undefined Behavior in Rust runtime functions
CVE-2023-30624BytecodeallianceWasmtime3.9LOWGuest-controlled out-of-bounds read/write on x86_64 in wasmtime
CVE-2023-26489BytecodeallianceWasmtime10CRITICALCode Generation Bug in Wasmtime Affects WebAssembly on x86_64 Platforms
CVE-2023-27477BytecodeallianceWasmtime3.1LOWWasmtime vulnerable to out of bounds read/write with zero-memory-pages configuration
CVE-2022-39392BytecodeallianceWasmtime5.9MEDIUMWasmtime vulnerable to data leakage between instances in the pooling allocator
CVE-2022-39393BytecodeallianceWasmtime8.6HIGHwasmtime_trap_code C API function has out of bounds write vulnerability
CVE-2022-39394BytecodeallianceWasmtime3.8LOWCranelift vulnerable to miscompilation of constant values in division on AArch64
CVE-2022-31169BytecodeallianceWasmtime5.9MEDIUMUse After Free in Wasmtime
CVE-2022-31146BytecodeallianceWasmtime6.4MEDIUMMiscompilation of `i8x16.swizzle` and `select` with v128 inputs in Wasmtime
CVE-2022-31104BytecodeallianceWasmtime4.8MEDIUMUse after free in Wasmtime
CVE-2022-24791BytecodeallianceWasmtime8.1HIGHInvalid drop of partially-initialized instances in wasmtime
CVE-2022-23636BytecodeallianceWasmtime5.1MEDIUMOut-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime
CVE-2021-39218BytecodeallianceWasmtime6.3MEDIUMWrong type for `Linker`-define functions when used across two `Engine`s
CVE-2021-39219BytecodeallianceWasmtime6.3MEDIUMUse after free passing `externref`s to Wasm in Wasmtime
CVE-2021-39216BytecodeallianceWasmtime6.3MEDIUMMemory access due to code generation flaw in Cranelift module
CVE-2021-32629BytecodeallianceWasmtime7.2HIGH
18 July 2025
5 November 2024
15 September 2023
27 April 2023
8 March 2023
10 November 2022
22 July 2022
21 July 2022
28 June 2022
31 March 2022
16 February 2022
17 September 2021
24 May 2021
No more vulnerabilities to load.