wasmtime has 77 CVEs on record between 2021 and 2026. Disclosure cadence is accelerating: 41 in the last 90 days against 2 in the 90 before. The busiest recent month was October 2026 with 35. The median CVSS is 5.3 (medium), with 3 rated critical. None have a confirmed exploitation report.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.3
- Publish → KEV
- —
- Last 90 days
- 41 prev 2
Weakness classes
Products
- wasmtime 77
Worst active — by depth score
CVE-2023-26489Critical· 9.9Guest-controlled out-of-bounds read/write on x86\_6455RUSTSEC-2026-0380Critical· 9.9Bit-packing in Cranelift compiler causes silent overflow and miscompilation54RUSTSEC-2026-0379Critical· 9.9Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction54CVE-2022-39393High· 8.6Bug in pooling instance allocator47CVE-2021-39216Medium· 6.3Out-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime 35
wasmtime vulnerabilities
CVEs affecting wasmtime, newest first. Open any entry for full detail, references, and exploit status.
77 CVEsRSS
CVE-2025-53901Low· 3.3Host panic with `fd_renumber` WASIp1 function
Host panic with `fd_renumber` WASIp1 function
CVE-2024-51745NoneWasmtime doesn't fully sandbox all the Windows device filenames
Wasmtime doesn't fully sandbox all the Windows device filenames
CVE-2024-47813Low· 2.9Race condition could lead to WebAssembly control-flow integrity and type safety violations
Race condition could lead to WebAssembly control-flow integrity and type safety violations
CVE-2024-47763Medium· 5.5Runtime crash when combining tail calls with stack traces
Runtime crash when combining tail calls with stack traces
CVE-2024-30266Low· 3.3Panic when using a dropped extenref-typed element segment
Panic when using a dropped extenref-typed element segment
CVE-2023-41880Low· 2.2Miscompilation of wasm `i64x2.shr_s` instruction with constant input on x86\_64
Miscompilation of wasm `i64x2.shr_s` instruction with constant input on x86\_64
CVE-2023-30624Low· 3.9Undefined Behavior in Rust runtime functions
Undefined Behavior in Rust runtime functions
CVE-2023-27477Low· 3.1Miscompilation of `i8x16.select` with the same inputs on x86\_64
Miscompilation of `i8x16.select` with the same inputs on x86\_64
CVE-2023-26489Critical· 9.9Guest-controlled out-of-bounds read/write on x86\_64
Guest-controlled out-of-bounds read/write on x86\_64
CVE-2022-39393High· 8.6Bug in pooling instance allocator
Bug in pooling instance allocator
CVE-2022-39394Low· 3.8Out of bounds write in `wasmtime_trap_code` C API function
Out of bounds write in `wasmtime_trap_code` C API function
CVE-2022-39392Medium· 5.9Out of bounds read/write with zero-memory-pages configuration
Out of bounds read/write with zero-memory-pages configuration
CVE-2022-31146NoneUse After Free with `externref`s in Wasmtime
Use After Free with `externref`s in Wasmtime
CVE-2022-23636NonePoCMiscompilation of constant values in division on AArch64
Miscompilation of constant values in division on AArch64
CVE-2022-31104NoneMiscompilation of `i8x16.swizzle` and `select` with v128 inputs
Miscompilation of `i8x16.swizzle` and `select` with v128 inputs
CVE-2022-24791NoneUse after free with `externref`s and epoch interruption in Wasmtime
Use after free with `externref`s and epoch interruption in Wasmtime
CVE-2021-39216Medium· 6.3Out-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime
Out-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime