Webassembly Virtual Machine

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:webassembly_virtual_machine_project:webassembly_virtual_machine:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWebassembly Virtual Machine Project (42fad997-ffeb-5a50-96ad-8b58c48e96fa)
ProductWebassembly Virtual Machine (6f85c23c-8918-57dc-b0f9-524b0fdd8ce4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wavm/wavm purl2cpe 2026-06-01 10:12:34.765701

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-17293 vulnerable 2026-06-08 05:11:06.231704 Details available
An issue was discovered in WAVM before 2018-09-16. The run function in Programs/wavm/wavm.cpp does not check whether there is Emscripten memory to store the command-line arguments passed by the input WebAssembly file's main function, which allows attackers to cause a denial of service (application crash by NULL pointer dereference) or possibly have unspecified other impact by crafting certain WebAssembly files.
Published: 2018-09-21T06:00:00.000Z
Updated: 2024-08-05T10:47:04.134Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17292 vulnerable 2026-06-08 05:11:06.231225 Details available
An issue was discovered in WAVM before 2018-09-16. The loadModule function in Include/Inline/CLI.h lacks checking of the file length before a file magic comparison, allowing attackers to cause a Denial of Service (application crash caused by out-of-bounds read) by crafting a file that has fewer than 4 bytes.
Published: 2018-09-21T06:00:00.000Z
Updated: 2024-08-05T10:47:04.205Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16770 vulnerable 2026-06-08 05:11:05.462949 Details available
In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because a certain new_allocator allocate call fails.
Published: 2018-09-10T04:00:00.000Z
Updated: 2024-08-05T10:32:54.075Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16769 vulnerable 2026-06-08 05:11:05.462570 Details available
In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because libRuntime.so!llvm::InstructionCombiningPass::runOnFunction is mishandled.
Published: 2018-09-10T04:00:00.000Z
Updated: 2024-08-05T10:32:53.994Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16768 vulnerable 2026-06-08 05:11:05.462108 Details available
In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecified "heap-buffer-overflow" condition in IR::FunctionValidationContext::end.
Published: 2018-09-10T04:00:00.000Z
Updated: 2024-08-05T10:32:53.978Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16767 vulnerable 2026-06-08 05:11:05.461631 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16766 vulnerable 2026-06-08 05:11:05.461342 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16765 vulnerable 2026-06-08 05:11:05.461015 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16764 vulnerable 2026-06-08 05:11:05.460514 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.