CVE-2024-34250: Bytecodealliance Webassembly Micro Runtime

Medium severity, CVSS 6.2. EPSS: 0.3% chance of exploitation in the next 30 days.

A heap buffer overflow vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause at least a denial of service via the "wasm_loader_check_br" function in core/iwasm/interpreter/wasm_loader.c.

Affected products

• Bytecodealliance Webassembly Micro Runtime: version 2.0.0 only

Published 2024-05-06. Last modified 2026-06-17.