Known vulnerabilities in Wasmtime
Vendor:
Bytecode Alliance
Software:
Wasmtime
Software CPE:
cpe:2.3:a:bytecode_alliance:wasmtime:*:*:*:*:*:*:*:*
Website:
https://bytecodealliance.org/
Total vulnerabilities:
48
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
48.0.1
48.0.0
47.0.4
46.0.3
36.0.14
24.0.13
36.0.13
24.0.12
47.0.3
46.0.2
47.0.2
47.0.1
47.0.0
46.0.1
45.0.3
36.0.12
24.0.11
46.0.0
45.0.2
44.0.3
36.0.11
24.0.10
45.0.1
45.0.0
44.0.2
36.0.10
24.0.9
36.0.9
44.0.1
43.0.2
36.0.8
24.0.8
44.0.0
43.0.1
42.0.2
36.0.7
24.0.7
43.0.0
42.0.1
42.0.0
41.0.4
40.0.4
36.0.6
24.0.6
41.0.3
41.0.2
41.0.1
40.0.3
36.0.5
41.0.0
40.0.2
39.0.2
36.0.4
40.0.1
40.0.0
39.0.1
39.0.0
38.0.4
37.0.3
36.0.3
24.0.5
38.0.0
38.0.3
38.0.2
38.0.1
37.0.2
37.0.1
37.0.0
36.0.2
36.0.1
36.0.0
35.0.0
34.0.2
33.0.2
24.0.4
34.0.1
33.0.1
32.0.1
24.0.3
34.0.0
33.0.0
32.0.0
31.0.0
30.0.2
30.0.1
30.0.0
29.0.1
29.0.0
28.0.1
28.0.0
27.0.0
26.0.1
25.0.3
24.0.2
26.0.0
25.0.2
24.0.1
23.0.3
22.0.1
21.0.2
25.0.1
25.0.0
24.0.0
23.0.2
23.0.1
23.0.0
22.0.0
21.0.1
21.0.0
20.0.2
20.0.1
20.0.0
19.0.2
18.0.4
17.0.3
19.0.1
19.0.0
18.0.3
18.0.2
17.0.2
18.0.1
18.0.0
17.0.1
17.0.0
16.0.0
15.0.1
15.0.0
14.0.4
14.0.3
14.0.2
13.0.1
14.0.1
14.0.0
13.0.0
12.0.2
11.0.2
10.0.2
12.0.1
12.0.0
11.0.1
11.0.0
10.0.1
10.0.0
9.0.4
9.0.3
9.0.2
9.0.1
9.0.0
8.0.1
7.0.1
6.0.2
8.0.0
7.0.0
6.0.1
5.0.1
4.0.1
6.0.0
5.0.0
4.0.0
3.0.1
3.0.0
1.0.2
2.0.2
2.0.1
2.0.0
1.0.1
1.0.0
0.40.1
0.40.0
0.39.1
0.38.3
0.39.0
0.38.2
0.38.1
0.38.0
0.37.0
0.36.0
0.35.3
0.35.2
0.34.2
0.35.1
0.35.0
0.34.1
0.34.0
0.33.1
0.33.0
0.32.1
0.32.0
0.31.0
0.30.0
0.29.0
0.28.0
0.27.0
0.26.1
0.26.0
0.25.0
0.24.0
0.23.0
0.22.1
0.22.0
0.21.0
0.20.0
0.19.0
0.18.0
0.17.0
0.16.0
0.15.0
0.12.0
0.11.0
0.10.0
0.9.0
0.8.0
0.6.0
0.4.0
0.3.0
0.2.0
Vulnerabilities (48)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU144568 - UNIX Symbolic Link (Symlink) Following |
CWE-61 | Medium | 24.0.13, 36.0.14, 46.0.3, 47.0.4 | 21.08.2026 |
SB2026082167 |
||
| #VU144567 - Uncontrolled Memory Allocation |
CWE-789 | Low | 46.0.3, 47.0.4 | 21.08.2026 |
SB2026082167 |
||
| #VU140664 - Improper control of a resource through its lifetime |
CWE-664 | Low | 46.0.2, 47.0.3 | 01.08.2026 |
SB2026080106 |
||
| #VU140663 - Out-of-bounds write |
CWE-787 | Low | 25.0.0, 37.0.0, 46.0.2, 47.0.3 | 01.08.2026 |
SB2026080106 |
||
| #VU140662 - Improper preservation of permissions CVE-2026-58494 |
CWE-281 | Low | 24.0.11, 36.0.12, 45.0.3, 46.0.1 | 01.08.2026 |
SB2026080105 |
||
| #VU140661 - Missing Release of Resource after Effective Lifetime CVE-2026-54786 |
CWE-772 | Low | 3.0.0, 24.0.10, 36.0.11, 44.0.0, 45.0.2 | 01.08.2026 |
SB2026080104 |
||
| #VU132132 - Improper Access Control CVE-2026-47261 |
CWE-284 | Medium | 24.0.9, 36.0.10, 44.0.2, 45.0.0 | 22.05.2026 |
SB2026052255 |
||
| #VU129536 - Integer overflow CVE-2026-44216 |
CWE-190 | Low | 36.0.8, 43.0.2, 44.0.1 | 04.05.2026 |
SB2026050475 |
||
| #VU127045 - Allocation of Resources Without Limits or Throttling CVE-2026-27204 |
CWE-770 | Low | 24.0.6, 36.0.6, 40.0.4, 41.0.4, 42.0.0 | 23.04.2026 |
SB20260423100 |
||
| #VU127044 - Improper control of a resource through its lifetime CVE-2026-27195 |
CWE-664 | Low | 40.0.4, 41.0.4 | 23.04.2026 |
SB20260423100 |
||
| #VU127043 - Improper Check or Handling of Exceptional Conditions CVE-2026-27572 |
CWE-703 | Low | 24.0.6, 36.0.6, 40.0.4, 41.0.4, 42.0.0 | 23.04.2026 |
SB20260423100 |
||
| #VU127042 - Out-of-bounds read CVE-2026-24116 |
CWE-125 | Medium | 36.0.5, 40.0.3, 41.0.1 | 23.04.2026 |
SB2026042399 |
||
| #VU127041 - Improper Access Control CVE-2025-64345 |
CWE-284 | Low | 24.0.5, 36.0.3, 37.0.3, 38.0.4 | 23.04.2026 |
SB2026042398 |
||
| #VU127040 - Missing Release of Resource after Effective Lifetime CVE-2025-61670 |
CWE-772 | Low | 37.0.2 | 23.04.2026 |
SB2026042397 |
||
| #VU127039 - Improper control of a resource through its lifetime CVE-2025-53901 |
CWE-664 | Low | 24.0.4, 33.0.2, 34.0.2 | 23.04.2026 |
SB2026042396 |
||
| #VU125764 - Out-of-bounds read CVE-2026-34941 |
CWE-125 | Low | 24.0.7, 36.0.7, 42.0.2, 43.0.1 | 10.04.2026 |
SB2026041013 |
||
| #VU125763 - Out-of-bounds write CVE-2026-34987 |
CWE-787 | Medium | 36.0.7, 42.0.2, 43.0.1 | 10.04.2026 |
SB2026041013 |
||
| #VU125762 - Out-of-bounds write CVE-2026-34971 |
CWE-787 | Medium | 36.0.7, 42.0.2, 43.0.1 | 10.04.2026 |
SB2026041013 |
||
| #VU125761 - Uncaught Exception CVE-2026-34943 |
CWE-248 | Low | 24.0.7, 36.0.7, 42.0.2, 43.0.1 | 10.04.2026 |
SB2026041013 |
||
| #VU125753 - Out-of-bounds write CVE-2026-35195 |
CWE-787 | Low | 24.0.7, 36.0.7, 42.0.2, 43.0.1 | 10.04.2026 |
SB2026041013 |
Showing elements 1 - 20 out of 48