bytecodealliance wasmtime

• CVE-2026-34943 Medium 5.6 Wasmtime panics when lifting `flags` component value 0.3%
• CVE-2026-34942 Medium 5.9 Wasmtime panics when transcoding misaligned utf-16 strings 0.4%
• CVE-2026-34941 Medium 6.9 Wasmtime has a Heap OOB read in component model UTF-16 to latin1+utf16 string transcoding 0.4%
• CVE-2026-27572 Medium 6.9 Wasmtime can panic when adding excessive fields to a `wasi:http/types.fields` instance 0.5%
• CVE-2026-27204 Medium 6.9 Wasmtime WASI implementations are vulnerable to guest-controlled resource exhaustion 0.4%
• CVE-2026-27195 Medium 6.9 Wasmtime is vulnerable to panic when dropping a `[Typed]Func::call_async` future 0.4%
• CVE-2026-24116 Medium 4.1 Wasmtime segfault or unused out-of-sandbox load with f64.copysign operator on x86-64 0.2%
• CVE-2025-64345 Low 1.8 Wasmtime provides unsound API access to a WebAssembly shared linear memory 0.1%
• CVE-2025-62711 Low 2.1 Wasmtime vulnerable to segfault when using component resources 0.4%
• CVE-2025-61670 Low 1.0 Wasmtime has memory leak in C API with `externref` and `anyref` types 0.2%
• CVE-2025-53901 Low 3.5 Wasmtime has host panic with `fd_renumber` WASIp1 function 0.4%
• CVE-2024-51745 Low 2.3 Wasmtime doesn't fully sandbox all the Windows device filenames 0.8%
• CVE-2024-47813 Low 2.9 Wasmtime race condition could lead to WebAssembly control-flow integrity and type safety violations 0.2%
• CVE-2024-47763 Medium 5.5 Wasmtime runtime crash when combining tail calls with trapping imports 0.2%
• CVE-2024-30266 Low 3.3 Wasmtime vulnerable to panic when using a dropped extenref-typed element segment 0.3%
• CVE-2023-41880 Low 2.2 Miscompilation of wasm `i64x2.shr_s` instruction with constant input on x86_64 0.7%
• CVE-2023-30624 Low 3.9 Wasmtime has Undefined Behavior in Rust runtime functions 0.4%
• CVE-2023-26489 Critical 10.0 Guest-controlled out-of-bounds read/write on x86_64 in wasmtime 1.3%
• CVE-2023-27477 Low 3.1 wasmtime is a fast and secure runtime for WebAssembly. Wasmtime's code generation backend, Cranelift, has a bug on x86_64 platforms for the WebAssembly `i8x16.select` instruction which will produce th 0.6%
• CVE-2022-39394 Low 3.8 wasmtime_trap_code C API function has out of bounds write vulnerability 0.4%
• CVE-2022-39393 High 8.6 Wasmtime vulnerable to data leakage between instances in the pooling allocator 0.8%
• CVE-2022-39392 Medium 5.9 Wasmtime vulnerable to out of bounds read/write with zero-memory-pages configuration 0.7%
• CVE-2022-31169 Medium 5.9 Cranelift vulnerable to miscompilation of constant values in division on AArch64 0.9%
• CVE-2022-31146 Medium 6.4 Use After Free in Wasmtime 1.2%
• CVE-2022-31104 Medium 4.8 Miscompilation of `i8x16.swizzle` and `select` with v128 inputs in Wasmtime 1.8%
• CVE-2022-24791 High 8.1 Use after free in Wasmtime 1.2%
• CVE-2022-23636 Medium 5.1 Invalid drop of partially-initialized instances in wasmtime 0.8%
• CVE-2021-39218 Medium 6.3 Out-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime 0.3%
• CVE-2021-39219 Medium 6.3 Wrong type for `Linker`-define functions when used across two `Engine`s 0.4%
• CVE-2021-39216 Medium 6.3 Use after free passing `externref`s to Wasm in Wasmtime 0.3%
• CVE-2021-32629 High 7.2 Memory access due to code generation flaw in Cranelift module 0.5%