agentprime: bytecodealliance-wasm-micro-runtimeEvery new CVE for bytecodealliance-wasm-micro-runtime.https://agentprime.io/CVE-2026-54912: WAMR fast interpreter loader heap buffer overflow via constant deduplication mismatchhttps://agentprime.io/advisories/CVE-2026-54912/https://agentprime.io/advisories/CVE-2026-54912/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 17:29:18 GMTCVECVE-2026-54913: WebAssembly Micro Runtime: Missing `ref.null` heap-type validation in `load_init_expr` leaks host stack memory to the WebAssembly guesthttps://agentprime.io/advisories/CVE-2026-54913/https://agentprime.io/advisories/CVE-2026-54913/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 17:28:26 GMTCVECVE-2026-54914: WebAssembly Micro Runtime: Heap Buffer Overflow in WAMR WASI poll_oneoff Output Bufferhttps://agentprime.io/advisories/CVE-2026-54914/https://agentprime.io/advisories/CVE-2026-54914/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 17:27:16 GMTCVECVE-2025-64713: WebAssembly Micro Runtime frame_offset_bottom array bounds overflow in fast Interpreter mode when handling GET_GLOBAL(I32) followed by if opcodehttps://agentprime.io/advisories/CVE-2025-64713/https://agentprime.io/advisories/CVE-2025-64713/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Nov 2025 22:13:47 GMTCVECVE-2025-64704: WebAssembly Micro Runtime vulnerable to a segmentation fault in v128.store instructionhttps://agentprime.io/advisories/CVE-2025-64704/https://agentprime.io/advisories/CVE-2025-64704/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Nov 2025 22:06:46 GMTCVECVE-2025-58749: WAMR runtime hangs or crashes with large memory.fill addresses in LLVM-JIT modehttps://agentprime.io/advisories/CVE-2025-58749/https://agentprime.io/advisories/CVE-2025-58749/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Sep 2025 15:53:35 GMTCVECVE-2025-54126: WebAssembly Micro Runtime's `--addr-pool` option allows all IPv4 addresses when subnet mask is not specifiedhttps://agentprime.io/advisories/CVE-2025-54126/https://agentprime.io/advisories/CVE-2025-54126/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Jul 2025 21:52:36 GMTCVECVE-2025-43853: iwasm vulnerable to filesystem sandbox escape with symlink when using uvwasi featurehttps://agentprime.io/advisories/CVE-2025-43853/https://agentprime.io/advisories/CVE-2025-43853/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 May 2025 17:13:11 GMTCVE