wasm3 vulnerabilities and fixes

Recent CVEs affecting wasm3, with upgrade or downgrade steps. 6 tracked.

wasm3 has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-02-10. Highest priority: CVE-2024-27527 (score 46/100).

• CVE-2025-15413 MEDIUM 5.3 UPGRADE A vulnerability was detected in wasm3 up to 0.5.0
• CVE-2025-15572 LOW 3.3 UPGRADE A vulnerability has been found in wasm3 up to 0.5.0
• CVE-2024-27530 HIGH 8.4 DOWNGRADE wasm3 139076a contains a Use-After-Free in ForEachModule.
• CVE-2024-27529 HIGH 8.4 DOWNGRADE wasm3 139076a contains memory leaks in Read_utf8.
• CVE-2024-27528 HIGH 8.4 DOWNGRADE wasm3 139076a suffers from Invalid Memory Read, leading to DoS and potential Code Execution.
• CVE-2024-27527 HIGH 7.5 DOWNGRADE wasm3 139076a is vulnerable to Denial of Service (DoS).

FAQ

How do I fix wasm3 vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is wasm3 being exploited right now?

None of the tracked wasm3 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which wasm3 CVE should I patch first?

CVE-2024-27527 currently ranks highest (46/100): wasm3 139076a is vulnerable to Denial of Service (DoS)..

RSS feed for wasm3 · ← Back to latest CVEs