wamr

by cataggarv3.0.0-dev.8

Last updated Jun 8, 2026

WebAssembly Micro Runtime — interpreter (wamr) and AOT compiler (wamrc).

Install with winget

$ winget install --id cataggar.wamr --exact --version 3.0.0-dev.8

Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.

Built by Pckgr

For Intune admins

Stop chasing app updates. Pckgr patches them for you.

Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.

Start free 30-day trial

No credit card required.

About

WebAssembly Micro Runtime distribution with two portable commands:

- wamr — stack-based interpreter that decodes and runs a .wasm binary.

- wamrc — AOT (ahead-of-time) compiler that lowers a .wasm module to native code.

A fork of bytecodealliance/wasm-micro-runtime ported from C to Zig and maintained with AI assistance.

Installers · v3.0.0-dev.8

Architecture	Type	Scope	Install	Download
x64	ZIP archive	-		Direct
arm64	ZIP archive	-		Direct

Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.

Security

11 known CVEs via NVD

medium5.1Patched in wingetCVE-2025-64713affects before 2.4.4Nov 25, 2025
WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. Prior to version 2.4.4, an out-of-bounds array access issue exists in WAMR's fast interpreter mode during WASM bytecode loading. When frame_ref_bottom and frame_offset_bottom arrays are at c...
Vendor advisory
medium4.7Patched in wingetCVE-2025-64704affects before 2.4.4Nov 25, 2025
WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. Prior to version 2.4.4, WAMR is susceptible to a segmentation fault in v128.store instruction. This issue has been patched in version 2.4.4.
Vendor advisory
medium5.3Patched in wingetCVE-2025-58749affects before 2.4.2Sep 16, 2025
WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. In WAMR versions prior to 2.4.2, when running in LLVM-JIT mode, the runtime cannot exit normally when executing WebAssembly programs containing a memory.fill instruction where the first oper...
Patch
medium5.3Patched in wingetCVE-2025-54126affects <=2.4.0Jul 29, 2025
The WebAssembly Micro Runtime's (WAMR) iwasm package is the executable binary built with WAMR VMcore which supports WebAssembly System Interface (WASI) and command line interface. In versions 2.4.0 and below, iwasm uses --addr-pool with an IPv4 address that lacks a subnet mask,...
Patch
medium5.5Patched in wingetCVE-2025-43853affects before 2.2.0May 15, 2025
The WebAssembly Micro Runtime's (WAMR) iwasm package is the executable binary built with WAMR VMcore which supports WebAssembly System Interface (WASI) and command line interface. Anyone running WAMR up to and including version 2.2.0 or WAMR built with libc-uvwasi on Windows is...
Patch
high7.5Patched in wingetCVE-2024-27532affects before 2.4.2Nov 8, 2024
wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) 06df58f is vulnerable to NULL Pointer Dereference in function `block_type_get_result_types.
high7.8Patched in wingetCVE-2024-25431affects before 1.3.2Nov 8, 2024
An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to escalate privileges via a crafted file to the check_was_abi_compatibility function.
Patch
high7.5Patched in wingetCVE-2024-34251affects v2.0.0May 6, 2024
An out-of-bound memory read vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause a denial of service via the "block_type_get_arity" function in core/iwasm/interpreter/wasm.h.

Showing 8 of 11. Source: NVD, updated just now. Patch status is best-effort: NVD's fix version is compared against the latest version in winget, but the two version formats don't always align. Confirm with the vendor advisory before treating any specific build as safe.

See a CVE that affects your fleet? Push the patched version to Intune in one click with Pckgr - automated patching is the only way to keep up.

Related apps

G
ghrcataggar
cataggar.ghrv0.5.1
An installer for GitHub releases.
Microsoft .NET Windows Desktop Runtime 8.0Microsoft Corporation
Microsoft.DotNet.DesktopRuntime.8v8.0.28
.NET is a free, cross-platform, open-source developer platform for building many different types of applications.
Microsoft .NET Windows Desktop Runtime 10.0Microsoft Corporation
Microsoft.DotNet.DesktopRuntime.10v10.0.9
.NET is a free, cross-platform, open-source developer platform for building many different types of applications.
Microsoft Visual C++ 2010 x86 RedistributableMicrosoft Corporation
Microsoft.VCRedist.2010.x86v10.0.40219
The Microsoft Visual C++ 2010 SP1 Redistributable Package (x86) installs runtime components of Visual C++ Libraries required to run 32-bit applications developed with Visual C++ 2010 SP1 on a computer that does not have Visual C++ 2010 SP1 installed.
W
WinLibs (POSIX threads, UCRT runtime)Brecht Sanders
BrechtSanders.WinLibs.POSIX.UCRTv16.1.0-14.0.0-r2
A standalone build of GCC and MinGW-w64 for Windows, with POSIX threading library and UCRT runtime library.
Node.js (LTS)Node.js Foundation
OpenJS.NodeJS.LTSv24.16.0
Run JavaScript Everywhere

More from cataggar or browse aot, compiler, interpreter.

Frequently asked questions

How do I install wamr on Windows?

Open Windows Terminal, PowerShell, or Command Prompt and run: winget install --id cataggar.wamr --exact --version 3.0.0-dev.8. winget downloads the installer from cataggar and runs it. Requires Windows 10 (1809+) or Windows 11.

How do I install wamr silently for unattended deployment?

Add --silent and accept the agreements upfront: winget install --id cataggar.wamr --exact 3.0.0-dev.8 --silent --accept-package-agreements --accept-source-agreements. This is the variant Intune, Configuration Manager, and other deployment tools should use.

How do I uninstall wamr via winget?

Run: winget uninstall --id cataggar.wamr --exact. Add --silent for unattended uninstalls. winget will use the registered uninstaller from wamr's Apps & Features entry.

Is wamr free?

wamr is distributed under Apache-2.0. Refer to the publisher (https://github.com/cataggar/wamr) for the full license terms - Wingetly itself does not charge for installation.

Does wamr work on Windows 10?

Yes, as long as your Windows 10 build supports winget (1809 or newer). winget ships with App Installer on Windows 10/11 and pulls wamr directly from the publisher.

How do I keep wamr up to date?

Run winget upgrade --id cataggar.wamr --exact, or winget upgrade --all to update everything winget tracks. We index 1 version of wamr from microsoft/winget-pkgs.