bytecodealliance wasm-micro-runtime

• CVE-2026-54912 High 8.8 WAMR fast interpreter loader heap buffer overflow via constant deduplication mismatch 0.5%
• CVE-2026-54913 Medium 6.9 WebAssembly Micro Runtime: Missing `ref.null` heap-type validation in `load_init_expr` leaks host stack memory to the WebAssembly guest 0.3%
• CVE-2026-54914 High 8.3 WebAssembly Micro Runtime: Heap Buffer Overflow in WAMR WASI poll_oneoff Output Buffer 0.4%
• CVE-2025-64713 Medium 5.1 WebAssembly Micro Runtime frame_offset_bottom array bounds overflow in fast Interpreter mode when handling GET_GLOBAL(I32) followed by if opcode 0.4%
• CVE-2025-64704 Medium 4.7 WebAssembly Micro Runtime vulnerable to a segmentation fault in v128.store instruction 0.2%
• CVE-2025-58749 Low 2.1 WAMR runtime hangs or crashes with large memory.fill addresses in LLVM-JIT mode 0.4%
• CVE-2025-54126 Medium 6.9 WebAssembly Micro Runtime's `--addr-pool` option allows all IPv4 addresses when subnet mask is not specified 0.7%
• CVE-2025-43853 High 7.0 iwasm vulnerable to filesystem sandbox escape with symlink when using uvwasi feature 0.3%