WebAssembly vulnerabilities
12 published CVEs name WebAssembly among the affected products.
- Published CVEs
- 12
- Last 12 months
- 6
- Critical
- 0
- Known exploited
- 0
Critical 0High 1Medium 9Low 2Not scored 0
CVEs per yearBy the year they were published
- 20258
- 20264
Newest CVEs
- CVE-2026-90648
wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack. It does…
WebAssembly · wabt
High7.1 - CVE-2026-8257
WebAssembly Binaryen BrOn wasm-ir-builder.cpp makeBrOn assertion
WebAssembly · Binaryen
Medium4.8 - CVE-2025-15412
WebAssembly wabt wasm-decompile VarName out-of-bounds
WebAssembly · wabt
Medium4.8 - CVE-2025-15411
WebAssembly wabt wasm-decompile InsertNode memory corruption
WebAssembly · wabt
Medium4.8 - CVE-2025-14957
WebAssembly Binaryen IRBuilder wasm-ir-builder.cpp makeLocalTee null pointer dereference
WebAssembly · Binaryen
Medium4.8 - CVE-2025-14956
WebAssembly Binaryen wasm-binary.cpp readExport heap-based overflow
WebAssembly · Binaryen
Medium4.8 - CVE-2025-6275
WebAssembly wabt binary-reader-interp.cc GetFuncOffset use after free
WebAssembly · wabt
Medium4.8 - CVE-2025-6274
WebAssembly wabt binary-reader-interp.cc OnDataCount resource consumption
WebAssembly · wabt
Medium4.8 - CVE-2025-6273
WebAssembly wabt binary-reader-objdump.cc LogOpcode assertion
WebAssembly · wabt
Medium4.8 - CVE-2025-3122
WebAssembly wabt binary-reader-interp.cc BeginFunctionBody null pointer dereference
WebAssembly · wabt
Low2.3