Known vulnerabilities in Wasmtime - page 2
Vendor:
Bytecode Alliance
Software:
Wasmtime
Software CPE:
cpe:2.3:a:bytecode_alliance:wasmtime:*:*:*:*:*:*:*:*
Website:
https://bytecodealliance.org/
Total vulnerabilities:
48
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
48.0.1
48.0.0
47.0.4
46.0.3
36.0.14
24.0.13
36.0.13
24.0.12
47.0.3
46.0.2
47.0.2
47.0.1
47.0.0
46.0.1
45.0.3
36.0.12
24.0.11
46.0.0
45.0.2
44.0.3
36.0.11
24.0.10
45.0.1
45.0.0
44.0.2
36.0.10
24.0.9
36.0.9
44.0.1
43.0.2
36.0.8
24.0.8
44.0.0
43.0.1
42.0.2
36.0.7
24.0.7
43.0.0
42.0.1
42.0.0
41.0.4
40.0.4
36.0.6
24.0.6
41.0.3
41.0.2
41.0.1
40.0.3
36.0.5
41.0.0
40.0.2
39.0.2
36.0.4
40.0.1
40.0.0
39.0.1
39.0.0
38.0.4
37.0.3
36.0.3
24.0.5
38.0.0
38.0.3
38.0.2
38.0.1
37.0.2
37.0.1
37.0.0
36.0.2
36.0.1
36.0.0
35.0.0
34.0.2
33.0.2
24.0.4
34.0.1
33.0.1
32.0.1
24.0.3
34.0.0
33.0.0
32.0.0
31.0.0
30.0.2
30.0.1
30.0.0
29.0.1
29.0.0
28.0.1
28.0.0
27.0.0
26.0.1
25.0.3
24.0.2
26.0.0
25.0.2
24.0.1
23.0.3
22.0.1
21.0.2
25.0.1
25.0.0
24.0.0
23.0.2
23.0.1
23.0.0
22.0.0
21.0.1
21.0.0
20.0.2
20.0.1
20.0.0
19.0.2
18.0.4
17.0.3
19.0.1
19.0.0
18.0.3
18.0.2
17.0.2
18.0.1
18.0.0
17.0.1
17.0.0
16.0.0
15.0.1
15.0.0
14.0.4
14.0.3
14.0.2
13.0.1
14.0.1
14.0.0
13.0.0
12.0.2
11.0.2
10.0.2
12.0.1
12.0.0
11.0.1
11.0.0
10.0.1
10.0.0
9.0.4
9.0.3
9.0.2
9.0.1
9.0.0
8.0.1
7.0.1
6.0.2
8.0.0
7.0.0
6.0.1
5.0.1
4.0.1
6.0.0
5.0.0
4.0.0
3.0.1
3.0.0
1.0.2
2.0.2
2.0.1
2.0.0
1.0.1
1.0.0
0.40.1
0.40.0
0.39.1
0.38.3
0.39.0
0.38.2
0.38.1
0.38.0
0.37.0
0.36.0
0.35.3
0.35.2
0.34.2
0.35.1
0.35.0
0.34.1
0.34.0
0.33.1
0.33.0
0.32.1
0.32.0
0.31.0
0.30.0
0.29.0
0.28.0
0.27.0
0.26.1
0.26.0
0.25.0
0.24.0
0.23.0
0.22.1
0.22.0
0.21.0
0.20.0
0.19.0
0.18.0
0.17.0
0.16.0
0.15.0
0.12.0
0.11.0
0.10.0
0.9.0
0.8.0
0.6.0
0.4.0
0.3.0
0.2.0
Vulnerabilities (48)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU125760 - Improper input validation CVE-2026-34942 |
CWE-20 | Low | 24.0.7, 36.0.7, 42.0.2, 43.0.1 | 10.04.2026 |
SB2026041013 |
||
| #VU125759 - Type confusion CVE-2026-35186 |
CWE-843 | Low | 36.0.7, 42.0.2, 43.0.1 | 10.04.2026 |
SB2026041013 |
||
| #VU125758 - Out-of-bounds read CVE-2026-34944 |
CWE-125 | Medium | 24.0.7, 36.0.7, 42.0.2, 43.0.1 | 10.04.2026 |
SB2026041013 |
||
| #VU125757 - Incorrect Calculation CVE-2026-34946 |
CWE-682 | Low | 36.0.7, 42.0.2, 43.0.1 | 10.04.2026 |
SB2026041013 |
||
| #VU125756 - Type confusion CVE-2026-34945 |
CWE-843 | Low | 36.0.7, 42.0.2, 43.0.1 | 10.04.2026 |
SB2026041013 |
||
| #VU125755 - Improper Access Control CVE-2026-34988 |
CWE-284 | Low | 36.0.7, 42.0.2, 43.0.1 | 10.04.2026 |
SB2026041013 |
||
| #VU125754 - Use After Free CVE-2026-34983 |
CWE-416 | Low | 43.0.1 | 10.04.2026 |
SB2026041013 |
||
| #VU125752 - Use After Free CVE-2022-31146 |
CWE-416 | Low | 0.38.2 | 10.04.2026 |
SB2026041012 |
||
| #VU117688 - Reachable Assertion CVE-2025-62711 |
CWE-617 | Low | 38.0.3 | 28.10.2025 |
SB2025102810 |
||
| #VU100035 - Incomplete List of Disallowed Inputs CVE-2024-51745 |
CWE-184 | Low | 24.0.2, 25.0.3, 26.0.1 | 07.11.2024 |
SB2024110714 |
||
| #VU127038 - Always-Incorrect Control Flow Implementation CVE-2024-47763 |
CWE-670 | Low | 21.0.2, 22.0.1, 23.0.3, 24.0.1, 25.0.2 | 09.10.2024 |
SB20241009104 |
||
| #VU127037 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2024-47813 |
CWE-367 | Low | 21.0.2, 22.0.1, 23.0.3, 24.0.1, 25.0.2 | 09.10.2024 |
SB20241009104 |
||
| #VU127036 - Type confusion CVE-2024-30266 |
CWE-843 | Low | 19.0.1 | 02.04.2024 |
SB2024040267 |
||
| #VU127035 - Off-by-one Error CVE-2023-41880 |
CWE-193 | Low | 10.0.2, 11.0.2, 12.0.2 | 14.09.2023 |
SB2023091467 |
||
| #VU75586 - Reliance on Undefined, Unspecified, or Implementation-Defined Behavior CVE-2023-30624 |
CWE-758 | Low | 6.0.2, 7.0.1, 8.0.1 | 28.04.2023 |
SB2023042810 SB2023060840 SB202502194444 |
||
| #VU73808 - Improper input validation CVE-2023-27477 |
CWE-20 | Low | 4.0.1, 5.0.1, 6.0.1 | 20.03.2023 |
SB2023032006 SB2023032701 |
||
| #VU73803 - Out-of-bounds write CVE-2023-26489 |
CWE-787 | Medium | 4.0.1, 5.0.1, 6.0.1 | 20.03.2023 |
SB2023032006 SB2023032701 |
||
| #VU69924 - Out-of-bounds write CVE-2022-39394 |
CWE-787 | Low | 2.0.2 | 06.12.2022 |
SB2022120611 |
||
| #VU69922 - Out-of-bounds write CVE-2022-39392 |
CWE-787 | Low | 2.0.2 | 06.12.2022 |
SB2022120611 |
||
| #VU127027 - Incorrect Calculation CVE-2022-31169 |
CWE-682 | Medium | 0.38.2 | 20.07.2022 |
SB2026041012 |
Showing elements 21 - 40 out of 48