# wabt (PyPI) vulnerabilities

6 known vulnerabilities (1 high, 1 medium), with the versions each affects and the releases that fix them.

## At a glance

- Latest release: not known (cve.now hasn't read this package's releases)
- Newest unaffected release: not known without release data
- Registry: https://pypi.org/project/wabt/

## Advisories (6)

### [CVE-2023-46332](https://cve.now/CVE-2023-46332): WebAssembly wabt 1.0.33 contains an Out-of-Bound Memory Write in DataSegment::Drop(), which lead to segmentation fault.

- Severity: Unrated
- Published: Oct 23, 2023
- Affected: through 1.0.33.

### [CVE-2023-46331](https://cve.now/CVE-2023-46331): WebAssembly wabt 1.0.33 has an Out-of-Bound Memory Read in in DataSegment::IsValidRange(), which lead to segmentation fault.

- Severity: Unrated
- Published: Oct 23, 2023
- Affected: through 1.0.33.

### [CVE-2023-27119](https://cve.now/CVE-2023-27119): WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::Decompiler::WrapChild.

- Severity: Medium 5.5
- Published: Mar 10, 2023
- Affected: through 1.0.29.

### [CVE-2023-27117](https://cve.now/CVE-2023-27117): WebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt::Node::operator.

- Severity: Unrated
- Published: Mar 10, 2023
- Affected: through 1.0.29.

### [CVE-2023-27115](https://cve.now/CVE-2023-27115): WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::cat\_compute\_size.

- Severity: Unrated
- Published: Mar 10, 2023
- Affected: through 1.0.29.

### [CVE-2022-43281](https://cve.now/CVE-2022-43281): wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector\<wabt::Type…

- Severity: High 7.8
- Published: Oct 28, 2022
- Affected: through 1.0.29.

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages/pypi/wabt
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.
