bytecodealliance wasmtime

Name: bytecodealliance wasmtime
Brand: bytecodealliance

productUS

cpe:2.3:a:bytecodealliance:wasmtime:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

5critical12high15medium3low

updated 2026-10-27

vulnerabilities (41)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-23636US	high8.1	0.77% (55th)	Exploit	0.33.1	2022-02-16	2 versions
CVE-2022-31104US	medium5.6	1.79% (78th)	—	0.38.1	2022-06-28	< 0.38.1
CVE-2023-26489US	critical9.9	1.25% (69th)	—	4.0.1	2023-03-08	3 versions
CVE-2022-31146US	high8.8	1.25% (69th)	—	0.38.2	2022-07-21	0.37.0 → 0.38.2
CVE-2022-24791US	critical9.8	1.18% (68th)	—	0.35.2	2022-03-31	2 versions
CVE-2022-31169US	high7.5	0.92% (60th)	—	0.38.1	2022-07-22	< 0.38.1
CVE-2024-51745US	critical10.0	0.84% (58th)	—	24.0.2	2024-11-05	5 versions
CVE-2022-39393US	high8.6	0.75% (55th)	—	2.0.2	2022-11-10	2 versions
CVE-2023-41880US	medium5.3	0.67% (52nd)	—	12.0.2	2023-09-15	3 versions
CVE-2022-39392US	high7.4	0.66% (51st)	—	1.0.2	2022-11-10	2 versions
CVE-2023-27477US	medium4.3	0.62% (50th)	—	4.0.1	2023-03-08	3 versions
CVE-2026-27572US	high7.5	0.52% (44th)	—	24.0.6	2026-02-24	4 versions
CVE-2023-30624US	high8.8	0.45% (39th)	—	6.0.2	2023-04-27	3 versions
CVE-2026-27195US	high7.5	0.41% (35th)	—	41.0.4	2026-02-24	2 versions
CVE-2025-62711US	low3.1	0.41% (35th)	—	38.0.3	2025-10-24	38.0.0 → 38.0.3
CVE-2026-27204US	medium6.5	0.40% (34th)	—	24.0.6	2026-02-24	4 versions
CVE-2025-53901US	—	0.38% (32nd)	—	34.0.2	2025-07-18	3 versions
CVE-2026-34941US	high8.1	0.38% (31st)	—	36.0.7	2026-04-09	4 versions
CVE-2026-54786US	medium5.0	0.37% (30th)	—	45.0.2	2026-07-01	4 versions
CVE-2021-39219US	medium6.3	0.36% (30th)	—	0.30.0	2021-09-17	< 0.30.0
CVE-2026-34946US	high7.5	0.36% (29th)	—	36.0.7	2026-04-09	3 versions
CVE-2026-47261US	—	0.36% (29th)	—	36.0.10	2026-06-15	3 versions
CVE-2022-39394US	critical9.8	0.35% (29th)	—	2.0.2	2022-11-10	2 versions
CVE-2026-34942US	medium6.5	0.35% (29th)	—	43.0.1	2026-04-09	4 versions
CVE-2026-34943US	high7.5	0.32% (25th)	—	43.0.1	2026-04-09	4 versions
CVE-2026-34945US	medium6.5	0.32% (25th)	—	36.0.7	2026-04-09	3 versions
CVE-2024-30266US	medium5.5	0.32% (25th)	—	no fix	2024-04-04	= 19.0.0
CVE-2026-44216US	high7.5	0.32% (25th)	—	36.0.8	2026-05-14	3 versions
CVE-2026-34971US	—	0.32% (25th)	—	42.0.2	2026-04-09	3 versions
CVE-2021-39216US	low3.3	0.31% (23rd)	—	0.30.0	2021-09-17	0.19.0 → 0.30.0
CVE-2021-39218US	medium6.3	0.30% (23rd)	—	0.30.0	2021-09-17	0.26.0 → 0.30.0
CVE-2026-34988US	medium6.3	0.29% (21st)	—	42.0.2	2026-04-09	3 versions
CVE-2026-34987US	critical9.9	0.28% (20th)	—	42.0.2	2026-04-09	3 versions
CVE-2026-24116US	medium5.5	0.25% (16th)	—	40.0.3	2026-01-27	3 versions
CVE-2024-47763US	—	0.24% (16th)	—	no fix	2024-10-09	9 versions
CVE-2026-34944US	medium5.7	0.23% (13th)	—	24.0.7	2026-04-09	4 versions
CVE-2026-35195US	medium5.4	0.22% (12th)	—	42.0.2	2026-04-09	4 versions
CVE-2026-35186US	—	0.21% (12th)	—	42.0.2	2026-04-09	3 versions
CVE-2025-61670US	low3.3	0.19% (9th)	—	no fix	2025-10-07	2 versions
CVE-2024-47813US	—	0.15% (4th)	—	no fix	2024-10-09	15 versions
CVE-2026-34983US	medium5.0	0.12% (2nd)	—	no fix	2026-04-09	= 43.0.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read9 CVEs
CWE-787Out-of-bounds Write9 CVEs
CWE-416Use After Free6 CVEs
CWE-843Access of Resource Using Incompatible Type ('Type Confusion')4 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-248Uncaught Exception3 CVEs
CWE-590Free of Memory not on the Heap3 CVEs
CWE-682Incorrect Calculation3 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE41 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan