CVE-2022-43280: Webassembly Wabt

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr->GetReturnCallDropKeepCount.

Affected products

• Webassembly Wabt: version 1.0.29 only

Published 2022-10-28. Last modified 2026-06-17.