Skip to content

Bytecodealliance · product

Webassembly Micro Runtime

6 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

  1. An heap overflow vulnerability was discovered in Bytecode alliance wasm-micro-runtime v.1.2.3 allows a remote attacker to cause a denial of service via the wasm_loader_prepare_byt…CVE-2023-48105Bytecodealliance · 1.0% likely

    CWE-787

  2. An out-of-bound memory read vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause a denial of service via the "block_…CVE-2024-34251Bytecodealliance · CVSS 7.5 · 0.8% likely

    CWE-125

  3. An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to escalate privileges via a crafted file to the check_was_ab…CVE-2024-25431Bytecodealliance · CVSS 8.8 · 0.7% likely

    CWE-125

  4. wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) 06df58f is vulnerable to NULL Pointer Dereference in function `block_type_get_result_types.CVE-2024-27532Bytecodealliance · CVSS 7.5 · 0.5% likely

    CWE-476

  5. A heap buffer overflow vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause at least a denial of service via the "wa…CVE-2024-34250Bytecodealliance · CVSS 6.2 · 0.3% likely

    CWE-122

  6. Bytecode Alliance wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) before 1.3.0 can have an "double free or corruption" error for a valid WebAssembly module because push…CVE-2023-52284Bytecodealliance · 0.3% likely

    CWE-415

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP

Updated AboutDevelopersSign in