Advisories · Technology
bytecodealliance wasm-micro-runtime.
Every CVE that names bytecodealliance wasm-micro-runtime among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
WAMR fast interpreter loader heap buffer overflow via constant deduplication mismatch
- bytecodealliance wasm-micro-runtime
- Memory corruption
- CVSS 6.9 Medium
WebAssembly Micro Runtime: Missing `ref.null` heap-type validation in `load_init_expr` leaks host stack memory to the WebAssembly guest
- bytecodealliance wasm-micro-runtime
- Memory corruption
- CVSS 8.3 High
WebAssembly Micro Runtime: Heap Buffer Overflow in WAMR WASI poll_oneoff Output Buffer
- bytecodealliance wasm-micro-runtime
- Memory corruption
- CVSS 5.1 Medium
WebAssembly Micro Runtime frame_offset_bottom array bounds overflow in fast Interpreter mode when handling GET_GLOBAL(I32) followed by if opcode
- bytecodealliance wasm-micro-runtime
- Memory corruption
- CVSS 4.7 Medium
WebAssembly Micro Runtime vulnerable to a segmentation fault in v128.store instruction
- bytecodealliance wasm-micro-runtime
- CWE-754
- CVSS 2.1 Low
WAMR runtime hangs or crashes with large memory.fill addresses in LLVM-JIT mode
- bytecodealliance wasm-micro-runtime
- Memory corruption
- CVSS 6.9 Medium
WebAssembly Micro Runtime's `--addr-pool` option allows all IPv4 addresses when subnet mask is not specified
- bytecodealliance wasm-micro-runtime
- Information disclosure
- CVSS 7.0 High
iwasm vulnerable to filesystem sandbox escape with symlink when using uvwasi feature
- bytecodealliance wasm-micro-runtime
- CWE-61