bytecodealliance wasmtime

Name: bytecodealliance wasmtime
Brand: bytecodealliance

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

5critical13high15medium3low

updated 2026-10-28

vulnerabilities (44)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-23636US	high8.1	0.77% (56th)	Exploit	no fix	2022-02-16	2 versions
CVE-2022-31104US	medium5.6	1.79% (78th)	—	0.85.0	2022-06-28	2 versions
CVE-2023-26489US	critical9.9	1.25% (69th)	—	5.0.1	2023-03-08	6 versions
CVE-2022-31146US	high8.8	1.25% (69th)	—	0.85.2	2022-07-21	2 versions
CVE-2022-24791US	critical9.8	1.18% (68th)	—	0.35.2	2022-03-31	2 versions
CVE-2022-31169US	high7.5	0.92% (60th)	—	no fix	2022-07-22	2 versions
CVE-2024-51745US	critical10.0	0.84% (58th)	—	25.0.3	2024-11-05	3 versions
CVE-2022-39393US	high8.6	0.75% (55th)	—	2.0.2	2022-11-10	3 versions
CVE-2023-41880US	medium5.3	0.67% (52nd)	—	10.0.2	2023-09-15	3 versions
CVE-2022-39392US	high7.4	0.66% (52nd)	—	no fix	2022-11-10	≤ < 2.0.2
CVE-2023-27477US	medium4.3	0.62% (50th)	—	0.91.1	2023-03-08	6 versions
CVE-2026-27572US	high7.5	0.52% (44th)	—	36.0.6	2026-02-24	4 versions
CVE-2021-32629US	high8.8	0.46% (39th)	—	no fix	2021-05-24	≤ ≤ 0.73.0
CVE-2023-30624US	high8.8	0.45% (39th)	—	no fix	2023-04-27	3 versions
CVE-2026-27195US	high7.5	0.41% (35th)	—	40.0.4	2026-02-24	2 versions
CVE-2025-62711US	low3.1	0.41% (35th)	—	38.0.3	2025-10-24	38.0.0, → 38.0.3
CVE-2026-27204US	medium6.5	0.40% (34th)	—	36.0.6	2026-02-24	4 versions
CVE-2025-53901US	—	0.38% (32nd)	—	34.0.2	2025-07-18	3 versions
CVE-2026-34941US	high8.1	0.38% (31st)	—	42.0.2	2026-04-09	4 versions
CVE-2026-54786US	medium5.0	0.37% (30th)	—	45.0.2	2026-07-01	4 versions
CVE-2021-39219US	medium6.3	0.36% (30th)	—	no fix	2021-09-17	≤ ≤ 0.29.0
CVE-2026-34946US	high7.5	0.36% (29th)	—	44.0.1	2026-04-09	3 versions
CVE-2026-47261US	—	0.36% (29th)	—	36.0.10	2026-06-15	3 versions
CVE-2022-39394US	critical9.8	0.35% (29th)	—	no fix	2022-11-10	≤ < 2.0.2
CVE-2026-34942US	medium6.5	0.35% (29th)	—	36.0.7	2026-04-09	4 versions
CVE-2026-34943US	high7.5	0.32% (25th)	—	36.0.7	2026-04-09	4 versions
CVE-2026-34945US	medium6.5	0.32% (25th)	—	36.0.7	2026-04-09	3 versions
CVE-2024-30266US	medium5.5	0.32% (25th)	—	no fix	2024-04-04	2 versions
CVE-2026-44216US	high7.5	0.32% (25th)	—	36.0.8	2026-05-14	3 versions
CVE-2026-34971US	—	0.32% (25th)	—	36.0.7	2026-04-09	3 versions
CVE-2021-39216US	low3.3	0.31% (23rd)	—	no fix	2021-09-17	≤ 0.19.0, ≤0.29.0
CVE-2021-39218US	medium6.3	0.30% (23rd)	—	no fix	2021-09-17	≤ 0.26.0, ≤ 0.29.0
CVE-2026-34988US	medium6.3	0.29% (21st)	—	36.0.7	2026-04-09	3 versions
CVE-2026-34987US	critical9.9	0.28% (20th)	—	36.0.7	2026-04-09	3 versions
CVE-2026-24116US	medium5.5	0.25% (16th)	—	36.0.5	2026-01-27	3 versions
CVE-2024-47763US	—	0.24% (16th)	—	24.0.1	2024-10-09	5 versions
CVE-2026-34944US	medium5.7	0.23% (13th)	—	44.0.1	2026-04-09	4 versions
CVE-2026-35195US	medium5.4	0.22% (12th)	—	36.0.7	2026-04-09	4 versions
CVE-2026-35186US	—	0.21% (12th)	—	42.0.2	2026-04-09	3 versions
CVE-2025-61670US	low3.3	0.19% (9th)	—	37.0.2	2025-10-07	37.0.0, → 37.0.2
CVE-2026-58494US	—OT elevated	0.17% (6th)	—	36.0.12	2026-07-08	4 versions
CVE-2024-47813US	—	0.15% (4th)	—	23.0.3	2024-10-09	5 versions
CVE-2026-34983US	medium5.0	0.12% (2nd)	—	43.0.1	2026-04-09	43.0.0, → 43.0.1
CVE-2025-64345US	—	0.12% (2nd)	—	36.0.3	2025-11-12	4 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read10 CVEs
CWE-787Out-of-bounds Write9 CVEs
CWE-416Use After Free6 CVEs
CWE-843Access of Resource Using Incompatible Type ('Type Confusion')4 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-248Uncaught Exception3 CVEs
CWE-590Free of Memory not on the Heap3 CVEs
CWE-682Incorrect Calculation3 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)44 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan