https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2018-17293.htmlhttps://patchthecve.com/cve/CVE-2018-17293.htmlWed, 17 Jun 2026 01:45:37 +0000HIGH 8.8: An issue was discovered in WAVM before 2018-09-16. The run function in Programs/wavm/wavm.cpp does not check whether there is Emscripten memory to store the command-line arguments passed by the input WebAssembly file's main function, which allows attackers to cause a denial of service (application chttps://patchthecve.com/cve/CVE-2018-17292.htmlhttps://patchthecve.com/cve/CVE-2018-17292.htmlWed, 17 Jun 2026 01:45:37 +0000MEDIUM 6.5: An issue was discovered in WAVM before 2018-09-16. The loadModule function in Include/Inline/CLI.h lacks checking of the file length before a file magic comparison, allowing attackers to cause a Denial of Service (application crash caused by out-of-bounds read) by crafting a file that has fewer thanhttps://patchthecve.com/cve/CVE-2018-16770.htmlhttps://patchthecve.com/cve/CVE-2018-16770.htmlWed, 17 Jun 2026 01:44:47 +0000HIGH 8.8: In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because a certain new_allocator allocate call fails.https://patchthecve.com/cve/CVE-2018-16769.htmlhttps://patchthecve.com/cve/CVE-2018-16769.htmlWed, 17 Jun 2026 01:44:47 +0000HIGH 8.8: In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because libRuntime.so!llvm::InstructionCombiningPass::runOnFunction is mishandled.https://patchthecve.com/cve/CVE-2018-16768.htmlhttps://patchthecve.com/cve/CVE-2018-16768.htmlWed, 17 Jun 2026 01:44:47 +0000HIGH 8.8: In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecified "heap-buffer-overflow" condition in IR::FunctionValidationContext::end.https://patchthecve.com/cve/CVE-2018-16767.htmlhttps://patchthecve.com/cve/CVE-2018-16767.htmlWed, 17 Jun 2026 01:44:47 +0000HIGH 8.8: In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecified "heap-buffer-overflow" condition in FunctionValidationContext::popAndValidateOperand.https://patchthecve.com/cve/CVE-2018-16766.htmlhttps://patchthecve.com/cve/CVE-2018-16766.htmlWed, 17 Jun 2026 01:44:46 +0000HIGH 8.8: In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because Errors::unreachable() is reached.https://patchthecve.com/cve/CVE-2018-16765.htmlhttps://patchthecve.com/cve/CVE-2018-16765.htmlWed, 17 Jun 2026 01:44:46 +0000HIGH 8.8: In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecified "heap-buffer-overflow" condition in FunctionValidationContext::else_.https://patchthecve.com/cve/CVE-2018-16764.htmlhttps://patchthecve.com/cve/CVE-2018-16764.htmlWed, 17 Jun 2026 01:44:46 +0000HIGH 8.8: In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an IR::FunctionValidationContext::catch_all heap-based buffer over-read.