# pywasm3 (PyPI) vulnerabilities

11 known vulnerabilities (1 critical, 7 high, 1 medium), with the versions each affects and the releases that fix them.

## At a glance

- Latest release: not known (cve.now hasn't read this package's releases)
- Newest unaffected release: not known without release data
- Registry: https://pypi.org/project/pywasm3/

## Advisories (11)

### [CVE-2025-6272](https://cve.now/CVE-2025-6272): wasm3 m3\_compile.c MarkSlotAllocated out-of-bounds write

- Severity: Medium 4.8
- Published: Jun 19, 2025
- Affected: through 0.5.0.

### [CVE-2024-27530](https://cve.now/CVE-2024-27530): wasm3 139076a contains a Use-After-Free in ForEachModule.

- Severity: High 8.4
- Published: Nov 8, 2024
- Affected: through 0.5.0; through 139076a.

### [CVE-2024-27529](https://cve.now/CVE-2024-27529): wasm3 139076a contains memory leaks in Read\_utf8.

- Severity: High 8.4
- Published: Nov 8, 2024
- Affected: through 139076a; through 0.5.0.

### [CVE-2024-27528](https://cve.now/CVE-2024-27528): wasm3 139076a suffers from Invalid Memory Read, leading to DoS and potential Code Execution.

- Severity: High 8.4
- Published: Nov 8, 2024
- Affected: through 139076a; through 0.5.0.

### [CVE-2024-27527](https://cve.now/CVE-2024-27527): wasm3 139076a is vulnerable to Denial of Service (DoS).

- Severity: High 7.5
- Published: Nov 8, 2024
- Affected: through 139076a.

### [CVE-2024-34252](https://cve.now/CVE-2024-34252): wasm3 v0.5.0 was discovered to contain a global buffer overflow which leads to segmentation fault via the function…

- Severity: High 7.5
- Published: May 6, 2024
- Affected: through 0.5.0.

### [CVE-2024-34249](https://cve.now/CVE-2024-34249): wasm3 v0.5.0 was discovered to contain a heap buffer overflow which leads to segmentation fault via the function "DeallocateSlot" in…

- Severity: Critical 9.8
- Published: May 6, 2024
- Affected: through 0.5.0.

### [CVE-2024-34246](https://cve.now/CVE-2024-34246): wasm3 v0.5.0 was discovered to contain an out-of-bound memory read which leads to segmentation fault via the function "main" in…

- Severity: High 7.5
- Published: May 6, 2024
- Affected: through 0.5.0.

### [CVE-2022-39974](https://cve.now/CVE-2022-39974): WASM3 v0.5.0 was discovered to contain a segmentation fault via the component op\_Select\_i32\_srs in wasm3/source/m3\_exec.h.

- Severity: High 7.5
- Published: Sep 20, 2022
- Affected: through 0.5.0; all versions.

### [CVE-2022-34529](https://cve.now/CVE-2022-34529): WASM3 v0.5.0 was discovered to contain a segmentation fault via the component Compile\_Memory\_CopyFill.

- Severity: Unrated
- Published: Jul 27, 2022
- Affected: through 0.5.0; all versions.

### [CVE-2022-28990](https://cve.now/CVE-2022-28990): WASM3 v0.5.0 was discovered to contain a heap overflow via the component /wabt/bin/poc.wasm.

- Severity: Unrated
- Published: May 20, 2022
- Affected: through 0.5.0.

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages/pypi/pywasm3
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.