Known vulnerabilities in Wasmtime
Vendor:
Bytecode Alliance
Software:
Wasmtime
Software CPE:
cpe:2.3:a:bytecode_alliance:wasmtime:*:*:*:*:*:*:*:*
Website:
https://bytecodealliance.org/
Total vulnerabilities:
71
Public exploits:
1
Known exploited (KEV):
0
Breakdown by Severity Chart
50.0.0
36.0.19
48.0.7
49.0.4
36.0.18
48.0.6
49.0.3
36.0.17
48.0.4
48.0.5
49.0.2
36.0.16
48.0.3
49.0.1
49.0.0
48.0.2
36.0.15
48.0.1
48.0.0
47.0.4
46.0.3
36.0.14
24.0.13
36.0.13
24.0.12
47.0.3
46.0.2
47.0.2
47.0.1
47.0.0
46.0.1
45.0.3
36.0.12
24.0.11
46.0.0
45.0.2
44.0.3
36.0.11
24.0.10
45.0.1
45.0.0
44.0.2
36.0.10
24.0.9
36.0.9
44.0.1
43.0.2
36.0.8
24.0.8
44.0.0
43.0.1
42.0.2
36.0.7
24.0.7
43.0.0
42.0.1
42.0.0
41.0.4
40.0.4
36.0.6
24.0.6
41.0.3
41.0.2
41.0.1
40.0.3
36.0.5
41.0.0
40.0.2
39.0.2
36.0.4
40.0.1
40.0.0
39.0.1
39.0.0
38.0.4
37.0.3
36.0.3
24.0.5
38.0.0
38.0.3
38.0.2
38.0.1
37.0.2
37.0.1
37.0.0
36.0.2
36.0.1
36.0.0
35.0.0
34.0.2
33.0.2
24.0.4
34.0.1
33.0.1
32.0.1
24.0.3
34.0.0
33.0.0
32.0.0
31.0.0
30.0.2
30.0.1
30.0.0
29.0.1
29.0.0
28.0.1
28.0.0
27.0.0
26.0.1
25.0.3
24.0.2
26.0.0
25.0.2
24.0.1
23.0.3
22.0.1
21.0.2
25.0.1
25.0.0
24.0.0
23.0.2
23.0.1
23.0.0
22.0.0
21.0.1
21.0.0
20.0.2
20.0.1
20.0.0
19.0.2
18.0.4
17.0.3
19.0.1
19.0.0
18.0.3
18.0.2
17.0.2
18.0.1
18.0.0
17.0.1
17.0.0
16.0.0
15.0.1
15.0.0
14.0.4
14.0.3
14.0.2
13.0.1
14.0.1
14.0.0
13.0.0
12.0.2
11.0.2
10.0.2
12.0.1
12.0.0
11.0.1
11.0.0
10.0.1
10.0.0
9.0.4
9.0.3
9.0.2
9.0.1
9.0.0
8.0.1
7.0.1
6.0.2
8.0.0
7.0.0
6.0.1
5.0.1
4.0.1
6.0.0
5.0.0
4.0.0
3.0.1
3.0.0
1.0.2
2.0.2
2.0.1
2.0.0
1.0.1
1.0.0
0.40.1
0.40.0
0.39.1
0.38.3
0.39.0
0.38.2
0.38.1
0.38.0
0.37.0
0.36.0
0.35.3
0.35.2
0.34.2
0.35.1
0.35.0
0.34.1
0.34.0
0.33.1
0.33.0
0.32.1
0.32.0
0.31.0
0.30.0
0.29.0
0.28.0
0.27.0
0.26.1
0.26.0
0.25.0
0.24.0
0.23.0
0.22.1
0.22.0
0.21.0
0.20.0
0.19.0
0.18.0
0.17.0
0.16.0
0.15.0
0.12.0
0.11.0
0.10.0
0.9.0
0.8.0
0.6.0
0.4.0
0.3.0
0.2.0
Vulnerabilities (71)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU140662 - Improper preservation of permissions CVE-2026-58494 |
CWE-281 | Low | 24.0.11, 36.0.12, 45.0.3, 46.0.1 | 01.08.2026 |
SB2026080105 |
||
| #VU140661 - Missing Release of Resource after Effective Lifetime CVE-2026-54786 |
CWE-772 | Low | 3.0.0, 24.0.10, 36.0.11, 44.0.0, 45.0.2 | 01.08.2026 |
SB2026080104 |
||
| #VU132132 - Improper Access Control CVE-2026-47261 |
CWE-284 | Medium | 24.0.9, 36.0.10, 44.0.2, 45.0.0 | 22.05.2026 |
SB2026052255 |
||
| #VU129536 - Integer overflow CVE-2026-44216 |
CWE-190 | Low | 36.0.8, 43.0.2, 44.0.1 | 04.05.2026 |
SB2026050475 |
||
| #VU127045 - Allocation of Resources Without Limits or Throttling CVE-2026-27204 |
CWE-770 | Low | 24.0.6, 36.0.6, 40.0.4, 41.0.4, 42.0.0 | 23.04.2026 |
SB20260423100 |
||
| #VU127044 - Improper control of a resource through its lifetime CVE-2026-27195 |
CWE-664 | Low | 40.0.4, 41.0.4 | 23.04.2026 |
SB20260423100 |
||
| #VU127043 - Improper Check or Handling of Exceptional Conditions CVE-2026-27572 |
CWE-703 | Low | 24.0.6, 36.0.6, 40.0.4, 41.0.4, 42.0.0 | 23.04.2026 |
SB20260423100 |
||
| #VU127042 - Out-of-bounds read CVE-2026-24116 |
CWE-125 | Medium | 36.0.5, 40.0.3, 41.0.1 | 23.04.2026 |
SB2026042399 |
||
| #VU127041 - Improper Access Control CVE-2025-64345 |
CWE-284 | Low | 24.0.5, 36.0.3, 37.0.3, 38.0.4 | 23.04.2026 |
SB2026042398 |
||
| #VU127040 - Missing Release of Resource after Effective Lifetime CVE-2025-61670 |
CWE-772 | Low | 37.0.2 | 23.04.2026 |
SB2026042397 |
||
| #VU127039 - Improper control of a resource through its lifetime CVE-2025-53901 |
CWE-664 | Low | 24.0.4, 33.0.2, 34.0.2 | 23.04.2026 |
SB2026042396 |
||
| #VU127038 - Always-Incorrect Control Flow Implementation CVE-2024-47763 |
CWE-670 | Low | 21.0.2, 22.0.1, 23.0.3, 24.0.1, 25.0.2 | 09.10.2024 |
SB20241009104 |
||
| #VU127037 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2024-47813 |
CWE-367 | Low | 21.0.2, 22.0.1, 23.0.3, 24.0.1, 25.0.2 | 09.10.2024 |
SB20241009104 |
||
| #VU127036 - Type confusion CVE-2024-30266 |
CWE-843 | Low | 19.0.1 | 02.04.2024 |
SB2024040267 |
||
| #VU127035 - Off-by-one Error CVE-2023-41880 |
CWE-193 | Low | 10.0.2, 11.0.2, 12.0.2 | 14.09.2023 |
SB2023091467 |
||
| #VU127028 - Incorrect Calculation CVE-2022-31104 |
CWE-682 | Medium | 0.38.1 | 28.06.2022 |
SB2022062842 |
||
| #VU127029 - Use After Free CVE-2022-24791 |
CWE-416 | Low | 0.34.2, 0.35.2 | 31.03.2022 |
SB2022033128 |
||
| #VU127031 - Free of Memory not on the Heap CVE-2021-39218 |
CWE-590 | Medium | 0.30.0 | 17.09.2021 |
SB2021091726 SB2021092244 SB2021092504 and 1 more |
||
| #VU127032 - Type confusion CVE-2021-39219 |
CWE-843 | Low | 0.30.0 | 17.09.2021 |
SB2021091726 SB2021092244 SB2021092504 and 1 more |
||
| #VU127034 - Access of Memory Location After End of Buffer CVE-2021-32629 |
CWE-788 | High | - | 21.05.2021 |
SB2021052128 |
Showing elements 1 - 20 out of 71