webassembly vulnerabilities

Products

• binaryen 25
• wabt 12
• webassembly binary toolkit 4
• webassembly 3
• wasm 1

Latest webassembly CVEs

Newest publication first · page 1 of 2

1. CVE-2026-90648 wabt: RLBox: WasmBoxC: firefox: wasm2c: Sandbox escape via memory allocation failure

   Published 2026-09-12

   High·CVSS 7.1

   wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack. It does not check the return value of calloc() in wasm_rt_allocate_funcref_table() (wasm2c/wasm-rt-impl-tableops.inc). When the f...

2. CVE-2026-8257 WebAssembly Binaryen BrOn wasm-ir-builder.cpp makeBrOn assertion

   Published 2026-05-11

   Medium·CVSS 4.8

   A vulnerability was detected in WebAssembly Binaryen up to 117. This issue affects the function IRBuilder::makeBrOn of the file src/wasm/wasm-ir-builder.cpp of the component BrOn Parser. Performing a manipulation results in reachable assertion. The attack needs to be approached l...

3. CVE-2025-15412 WebAssembly wabt wasm-decompile VarName out-of-bounds

   Published 2026-01-01

   Medium·CVSS 4.8

   A security vulnerability has been detected in WebAssembly wabt up to 1.0.39. This issue affects the function wabt::Decompiler::VarName of the file /src/repro/wabt/bin/wasm-decompile of the component wasm-decompile. Such manipulation leads to out-of-bounds read. Local access is re...

4. CVE-2025-15411 WebAssembly wabt wasm-decompile InsertNode memory corruption

   Published 2026-01-01

   Medium·CVSS 4.8

   A weakness has been identified in WebAssembly wabt up to 1.0.39. This vulnerability affects the function wabt::AST::InsertNode of the file /src/repro/wabt/bin/wasm-decompile of the component wasm-decompile. This manipulation causes memory corruption. It is possible to launch the...

5. CVE-2025-14957 WebAssembly Binaryen IRBuilder wasm-ir-builder.cpp makeLocalTee null pointer dereference

   Published 2025-12-19

   Medium·CVSS 4.8

   A vulnerability was identified in WebAssembly Binaryen up to 125. This affects the function IRBuilder::makeLocalGet/IRBuilder::makeLocalSet/IRBuilder::makeLocalTee of the file src/wasm/wasm-ir-builder.cpp of the component IRBuilder. Such manipulation of the argument Index leads t...

6. CVE-2025-14956 WebAssembly Binaryen wasm-binary.cpp readExport heap-based overflow

   Published 2025-12-19

   Medium·CVSS 4.8

   A vulnerability was determined in WebAssembly Binaryen up to 125. Affected by this issue is the function WasmBinaryReader::readExport of the file src/wasm/wasm-binary.cpp. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on the local host....

7. CVE-2025-6275 WebAssembly wabt binary-reader-interp.cc GetFuncOffset use after free

   Published 2025-06-19

   Medium·CVSS 4.8

   A vulnerability was found in WebAssembly wabt up to 1.0.37. It has been declared as problematic. Affected by this vulnerability is the function GetFuncOffset of the file src/interp/binary-reader-interp.cc. The manipulation leads to use after free. It is possible to launch the att...

8. CVE-2025-6274 WebAssembly wabt binary-reader-interp.cc OnDataCount resource consumption

   Published 2025-06-19

   Medium·CVSS 4.8

   A vulnerability was found in WebAssembly wabt up to 1.0.37. It has been classified as problematic. Affected is the function OnDataCount of the file src/interp/binary-reader-interp.cc. The manipulation leads to resource consumption. Attacking locally is a requirement. The exploit...

9. CVE-2025-3122 WebAssembly wabt binary-reader-interp.cc BeginFunctionBody null pointer dereference

   Published 2025-04-02

   Low·CVSS 2.3

   A vulnerability classified as problematic was found in WebAssembly wabt 1.0.36. Affected by this vulnerability is the function BinaryReaderInterp::BeginFunctionBody of the file src/interp/binary-reader-interp.cc. The manipulation leads to null pointer dereference. The attack can...

10. CVE-2025-2584 WebAssembly wabt binary-reader-interp.cc GetReturnCallDropKeepCount heap-based overflow

    Published 2025-03-21

    Low·CVSS 2.3

    A vulnerability was found in WebAssembly wabt 1.0.36. It has been declared as critical. This vulnerability affects the function BinaryReaderInterp::GetReturnCallDropKeepCount of the file wabt/src/interp/binary-reader-interp.cc. The manipulation leads to heap-based buffer overflow...

11. CVE-2025-2368 WebAssembly wabt Malformed File binary-reader-interp.cc OnExport heap-based overflow

    Published 2025-03-17

    Medium·CVSS 5.3

    A vulnerability was found in WebAssembly wabt 1.0.36 and classified as critical. This issue affects the function wabt::interp::(anonymous namespace)::BinaryReaderInterp::OnExport of the file wabt/src/interp/binary-reader-interp.cc of the component Malformed File Handler. The mani...

12. CVE-2023-46332 WebAssembly wabt 1.0.33 contains an Out-of-Bound Memory Write in DataSegment::Drop(), which lead to segmentation fault.

    Published 2023-10-23

    Medium·CVSS 5.5

    WebAssembly wabt 1.0.33 contains an Out-of-Bound Memory Write in DataSegment::Drop(), which lead to segmentation fault.

13. CVE-2023-46331 WebAssembly wabt 1.0.33 has an Out-of-Bound Memory Read in in DataSegment::IsValidRange(), which lead to segmentation fault.

    Published 2023-10-23

    Medium·CVSS 5.5

    WebAssembly wabt 1.0.33 has an Out-of-Bound Memory Read in in DataSegment::IsValidRange(), which lead to segmentation fault.

14. CVE-2020-18382 Heap-buffer-overflow in /src/wasm/wasm-binary.cpp in wasm::WasmBinaryBuilder::visitBlock(wasm::Block*) in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-se...

    Published 2023-08-22

    Medium·CVSS 6.5

    Heap-buffer-overflow in /src/wasm/wasm-binary.cpp in wasm::WasmBinaryBuilder::visitBlock(wasm::Block*) in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-opt.

15. CVE-2020-18378 A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-se...

    Published 2023-08-22

    Medium·CVSS 6.5

    A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-as.

16. CVE-2023-31670 An issue in wasm2c 1.0.32, wasm2wat 1.0.32, wasm-decompile 1.0.32, and wasm-validate 1.0.32 allows attackers to cause a Denial of Service (DoS) via running a crafted binary.

    Published 2023-05-23

    High·CVSS 7.5

    An issue in wasm2c 1.0.32, wasm2wat 1.0.32, wasm-decompile 1.0.32, and wasm-validate 1.0.32 allows attackers to cause a Denial of Service (DoS) via running a crafted binary.

17. CVE-2023-31669 WebAssembly wat2wasm v1.0.32 allows attackers to cause a libc++abi.dylib crash by putting '@' before a quote (").

    Published 2023-05-23

    Medium·CVSS 5.5

    WebAssembly wat2wasm v1.0.32 allows attackers to cause a libc++abi.dylib crash by putting '@' before a quote (").

18. CVE-2023-27116 WebAssembly v1.0.29 discovered to contain an abort in CWriter::MangleType.

    Published 2023-03-10

    Medium·CVSS 5.5

    WebAssembly v1.0.29 discovered to contain an abort in CWriter::MangleType.

19. CVE-2023-27119 WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::Decompiler::WrapChild.

    Published 2023-03-10

    Medium·CVSS 5.5

    WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::Decompiler::WrapChild.

20. CVE-2023-27117 WebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt::Node::operator.

    Published 2023-03-10

    High·CVSS 7.8

    WebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt::Node::operator.

21. CVE-2023-27115 WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::cat_compute_size.

    Published 2023-03-10

    Medium·CVSS 5.5

    WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::cat_compute_size.

22. CVE-2022-43283 wasm2c v1.0.29 was discovered to contain an abort in CWriter::Write.

    Published 2022-10-28

    Medium·CVSS 5.5

    wasm2c v1.0.29 was discovered to contain an abort in CWriter::Write.

23. CVE-2022-43282 wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallIndirectExpr->GetReturnCallDropKeepCount.

    Published 2022-10-28

    High·CVSS 7.1

    wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallIndirectExpr->GetReturnCallDropKeepCount.

24. CVE-2022-43280 wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr->GetReturnCallDropKeepCount.

    Published 2022-10-28

    High·CVSS 7.1

    wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr->GetReturnCallDropKeepCount.

25. CVE-2022-43281 wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector<wabt::Type, std::allocatorwabt::Type>::size() at /bits/stl_vector.h.

    Published 2022-10-28

    High·CVSS 7.8

    wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector<wabt::Type, std::allocatorwabt::Type>::size() at /bits/stl_vector.h.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.