WebAssembly vulnerabilities
We track 6 vulnerabilities in WebAssembly products across 3 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on September 13, 2026.
Latest WebAssembly vulnerabilities
- 7.1 High severity
wabt: Unchecked Return Value
wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack. It does not check the return value of calloc() in wasm_rt_allocate_funcref_table() (wasm2c/wasm-rt-impl-table
- 7.8 High severity
wabt: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in WebAssembly wabt up to 1.0.39. This issue affects the function wabt::Decompiler::VarName of the file /src/repro/wabt/bin/wasm-decompile of the component wasm-decompile. Such manipulation leads to out-of-bounds read
- 7.8 High severity
wabt: Improper Restriction of Operations within the Bounds of a Memory Buffer
A weakness has been identified in WebAssembly wabt up to 1.0.39. This vulnerability affects the function wabt::AST::InsertNode of the file /src/repro/wabt/bin/wasm-decompile of the component wasm-decompile. This manipulation causes memory corruption. It is pos
- 7.1 High severity
Binaryen: Out-of-bounds Read
A vulnerability was determined in WebAssembly Binaryen up to 125. Affected by this issue is the function WasmBinaryReader::readExport of the file src/wasm/wasm-binary.cpp. This manipulation causes heap-based buffer overflow. It is possible to launch the attack
- 8.8 High severity
wabt: Out-of-bounds Write
A vulnerability was found in WebAssembly wabt 1.0.36 and classified as critical. This issue affects the function wabt::interp::(anonymous namespace)::BinaryReaderInterp::OnExport of the file wabt/src/interp/binary-reader-interp.cc of the component Malformed Fi
- 7.8 High severity
Wasm: Out-of-bounds Write
wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector<wabt::Type, std::allocator<wabt::Type>>::size() at /bits/stl_vector.h.