# pywasm3 (PyPI) vulnerabilities Source: https://junglewise.ai/threats/technologies/pywasm3 Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/pywasm3.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 13 vulnerabilities in pywasm3 (PyPI): 0 in the last 7 days and 0 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2025-6272, was published on 19 June 2025. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 0 - All time: 13 (2 critical, 0 exploited in the wild) ## About pywasm3 (PyPI) Python bindings for the Wasm3 WebAssembly interpreter. ## Latest pywasm3 (PyPI) vulnerabilities - [CVE-2025-6272: wasm3 and pywasm3 out-of-bounds write in MarkSlotAllocated](https://junglewise.ai/threats/cve-2025-6272-wasm3-and-pywasm3-out-of-bounds-write-in-markslotallocated) (medium, CVSS 4, published 19 Jun 2025) - [CVE-2024-27530: wasm3 pywasm3 use-after-free in ForEachModule](https://junglewise.ai/threats/cve-2024-27530-wasm3-pywasm3-use-after-free-in-foreachmodule) (high, CVSS 8.4, published 9 Nov 2024) - [CVE-2024-27529: Wasm3 uncontrolled memory allocation in Read_utf8](https://junglewise.ai/threats/cve-2024-27529-wasm3-uncontrolled-memory-allocation-in-read-utf8) (high, CVSS 8.4, published 9 Nov 2024) - [CVE-2024-27528: wasm3 pywasm3 out-of-bounds read in m3_exec.h](https://junglewise.ai/threats/cve-2024-27528-wasm3-pywasm3-out-of-bounds-read-in-m3-exec-h) (high, CVSS 8.4, published 9 Nov 2024) - [CVE-2024-27527: PYSEC-2024-303 - wasm3 139076a is vulnerable to Denial of Service (DoS).](https://junglewise.ai/threats/cve-2024-27527-pysec-2024-303-wasm3-139076a-is-vulnerable-to-denial-of-service) (low, CVSS 3.1, published 8 Nov 2024) - [CVE-2024-34246: PYSEC-2024-307 - wasm3 v0.5.0 was discovered to contain an out-of-bound memory read which leads to segmentation fault…](https://junglewise.ai/threats/cve-2024-34246-pysec-2024-307-wasm3-v0-5-0-was-discovered-to-contain-an-out-of) (low, CVSS 3.1, published 6 May 2024) - [CVE-2024-34252: wasm3 pywasm3 global buffer overflow in PreserveRegisterIfOccupied](https://junglewise.ai/threats/cve-2024-34252-wasm3-pywasm3-global-buffer-overflow-in) (critical, CVSS 9.8, published 6 May 2024) - [CVE-2024-34249: wasm3 heap buffer overflow in DeallocateSlot](https://junglewise.ai/threats/cve-2024-34249-wasm3-heap-buffer-overflow-in-deallocateslot) (critical, CVSS 9.8, published 6 May 2024) - [PYSEC-2022-43155 - wasm3 commit 7890a2097569fde845881e0b352d813573e371f9 was discovered to contain a segmentation…](https://junglewise.ai/threats/pysec-2022-43155-wasm3-commit-7890a2097569fde845881e0b352d813573e371f9-91ff6a65) (low, CVSS 3.1, published 13 Dec 2022) - [CVE-2022-39974: PYSEC-2022-43058 - WASM3 v0.5.0 was discovered to contain a segmentation fault via the component op_Select_i32_srs in…](https://junglewise.ai/threats/cve-2022-39974-wasm3-improper-input-validation-vulnerability) (low, CVSS 3.1, published 20 Sep 2022) - [CVE-2022-34529: PYSEC-2022-43057 - WASM3 v0.5.0 was discovered to contain a segmentation fault via the component Compile_Memory_CopyFill.](https://junglewise.ai/threats/cve-2022-34529-wasm3-segmentation-fault) (low, CVSS 3.1, published 27 Jul 2022) - [CVE-2022-28990: PYSEC-2022-43154 - WASM3 v0.5.0 was discovered to contain a heap overflow via the component /wabt/bin/poc.wasm.](https://junglewise.ai/threats/cve-2022-28990-buffer-overflow-in-wasm3) (low, CVSS 3.1, published 20 May 2022) - [PYSEC-2022-43153 - Wasm3 0.5.0 has a heap-based buffer overflow in NewCodePage in m3_code.c (called indirectly from Compile_BranchTable in…](https://junglewise.ai/threats/pysec-2022-43153-wasm3-0-5-0-has-a-heap-based-buffer-overflow-in-bdd144ab) (low, CVSS 3.1, published 16 Apr 2022) ## Most severe pywasm3 (PyPI) vulnerabilities - [CVE-2024-34249: wasm3 heap buffer overflow in DeallocateSlot](https://junglewise.ai/threats/cve-2024-34249-wasm3-heap-buffer-overflow-in-deallocateslot) (critical, CVSS 9.8, published 6 May 2024) - [CVE-2024-34252: wasm3 pywasm3 global buffer overflow in PreserveRegisterIfOccupied](https://junglewise.ai/threats/cve-2024-34252-wasm3-pywasm3-global-buffer-overflow-in) (critical, CVSS 9.8, published 6 May 2024) - [CVE-2024-27529: Wasm3 uncontrolled memory allocation in Read_utf8](https://junglewise.ai/threats/cve-2024-27529-wasm3-uncontrolled-memory-allocation-in-read-utf8) (high, CVSS 8.4, published 9 Nov 2024) - [CVE-2024-27528: wasm3 pywasm3 out-of-bounds read in m3_exec.h](https://junglewise.ai/threats/cve-2024-27528-wasm3-pywasm3-out-of-bounds-read-in-m3-exec-h) (high, CVSS 8.4, published 9 Nov 2024) - [CVE-2024-27530: wasm3 pywasm3 use-after-free in ForEachModule](https://junglewise.ai/threats/cve-2024-27530-wasm3-pywasm3-use-after-free-in-foreachmodule) (high, CVSS 8.4, published 9 Nov 2024) - [CVE-2025-6272: wasm3 and pywasm3 out-of-bounds write in MarkSlotAllocated](https://junglewise.ai/threats/cve-2025-6272-wasm3-and-pywasm3-out-of-bounds-write-in-markslotallocated) (medium, CVSS 4, published 19 Jun 2025) - [CVE-2022-39974: PYSEC-2022-43058 - WASM3 v0.5.0 was discovered to contain a segmentation fault via the component op_Select_i32_srs in…](https://junglewise.ai/threats/cve-2022-39974-wasm3-improper-input-validation-vulnerability) (low, CVSS 3.1, published 20 Sep 2022) - [CVE-2024-34246: PYSEC-2024-307 - wasm3 v0.5.0 was discovered to contain an out-of-bound memory read which leads to segmentation fault…](https://junglewise.ai/threats/cve-2024-34246-pysec-2024-307-wasm3-v0-5-0-was-discovered-to-contain-an-out-of) (low, CVSS 3.1, published 6 May 2024) - [CVE-2024-27527: PYSEC-2024-303 - wasm3 139076a is vulnerable to Denial of Service (DoS).](https://junglewise.ai/threats/cve-2024-27527-pysec-2024-303-wasm3-139076a-is-vulnerable-to-denial-of-service) (low, CVSS 3.1, published 8 Nov 2024) - [CVE-2022-28990: PYSEC-2022-43154 - WASM3 v0.5.0 was discovered to contain a heap overflow via the component /wabt/bin/poc.wasm.](https://junglewise.ai/threats/cve-2022-28990-buffer-overflow-in-wasm3) (low, CVSS 3.1, published 20 May 2022) ## Vulnerabilities per week Nothing was published in the last eight weeks. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other PyPI technologies - [tensorflow (PyPI)](https://junglewise.ai/threats/technologies/pypi-tensorflow): 435 vulnerabilities - [tensorflow-cpu (PyPI)](https://junglewise.ai/threats/technologies/tensorflow-cpu): 430 vulnerabilities - [tensorflow-gpu (PyPI)](https://junglewise.ai/threats/technologies/tensorflow-gpu): 427 vulnerabilities - [open-webui (PyPI)](https://junglewise.ai/threats/technologies/open-webui): 177 vulnerabilities - [Django (PyPI)](https://junglewise.ai/threats/technologies/django): 173 vulnerabilities - [apache-airflow (PyPI)](https://junglewise.ai/threats/technologies/apache-airflow): 159 vulnerabilities - [pillow (PyPI)](https://junglewise.ai/threats/technologies/pillow): 125 vulnerabilities - [praisonai (PyPI)](https://junglewise.ai/threats/technologies/pypi-praisonai): 120 vulnerabilities - [vllm (PyPI)](https://junglewise.ai/threats/technologies/pypi-vllm): 117 vulnerabilities - [plone (PyPI)](https://junglewise.ai/threats/technologies/pypi-plone): 101 vulnerabilities - [mlflow (PyPI)](https://junglewise.ai/threats/technologies/mlflow): 88 vulnerabilities - [picklescan (PyPI)](https://junglewise.ai/threats/technologies/picklescan): 86 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "pywasm3 (PyPI) vulnerabilities", https://junglewise.ai/threats/technologies/pywasm3, 13 November 2026.