Wasm3 Project Wasm3 — known CVE vulnerabilities

Every CVE whose affected-product data names Wasm3 Project Wasm3, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (19)

• CVE-2024-34249 — CVSS 9.8 (critical): wasm3 v0.5.0 was discovered to contain a heap buffer overflow which leads to segmentation fault via the function "DeallocateSlot" in…
• CVE-2024-27530 — CVSS 8.4 (high): wasm3 139076a contains a Use-After-Free in ForEachModule.
• CVE-2024-27529 — CVSS 8.4 (high): wasm3 139076a contains memory leaks in Read_utf8.
• CVE-2024-27528 — CVSS 8.4 (high): wasm3 139076a suffers from Invalid Memory Read, leading to DoS and potential Code Execution.
• CVE-2022-28990 — CVSS 7.8 (high): WASM3 v0.5.0 was discovered to contain a heap overflow via the component /wabt/bin/poc.wasm.
• CVE-2021-38592 — CVSS 7.5 (high): Wasm3 0.5.0 has a heap-based buffer overflow in op_Const64 (called from EvaluateExpression and m3_LoadModule).
• CVE-2022-39974 — CVSS 7.5 (high): WASM3 v0.5.0 was discovered to contain a segmentation fault via the component op_Select_i32_srs in wasm3/source/m3_exec.h.
• CVE-2024-27527 — CVSS 7.5 (high): wasm3 139076a is vulnerable to Denial of Service (DoS).
• CVE-2024-34246 — CVSS 7.5 (high): wasm3 v0.5.0 was discovered to contain an out-of-bound memory read which leads to segmentation fault via the function "main" in…
• CVE-2024-34252 — CVSS 7.5 (high): wasm3 v0.5.0 was discovered to contain a global buffer overflow which leads to segmentation fault via the function "PreserveRegisterIfOccupi…
• CVE-2022-28966 — CVSS 5.5 (medium): Wasm3 0.5.0 has a heap-based buffer overflow in NewCodePage in m3_code.c (called indirectly from Compile_BranchTable in m3_compile.c).
• CVE-2021-45947 — CVSS 5.5 (medium): Wasm3 0.5.0 has an out-of-bounds write in Runtime_Release (called from EvaluateExpression and InitDataSegments).
• CVE-2021-45946 — CVSS 5.5 (medium): Wasm3 0.5.0 has an out-of-bounds write in CompileBlock (called from Compile_LoopOrBlock and CompileBlockStatements).
• CVE-2021-45929 — CVSS 5.5 (medium): Wasm3 0.5.0 has an out-of-bounds write in CompileBlock (called from CompileElseBlock and Compile_If).
• CVE-2022-34529 — CVSS 5.5 (medium): WASM3 v0.5.0 was discovered to contain a segmentation fault via the component Compile_Memory_CopyFill.
• CVE-2022-44874 — CVSS 5.5 (medium): wasm3 commit 7890a2097569fde845881e0b352d813573e371f9 was discovered to contain a segmentation fault via the component op_CallIndirect at…
• CVE-2025-15413 — CVSS 5.3 (medium): A vulnerability was detected in wasm3 up to 0.5.0. Impacted is the function op_SetSlot_i32/op_CallIndirect of the file m3_exec.h…
• CVE-2025-15572 — CVSS 3.3 (low): A vulnerability has been found in wasm3 up to 0.5.0. The affected element is the function NewCodePage. The manipulation leads to memory…
• CVE-2025-6272 — CVSS 3.3 (low): A vulnerability has been found in wasm3 0.5.0 and classified as problematic. This vulnerability affects the function MarkSlotAllocated of…