Memory Corruption

Every one of the 43 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Use After Free in lucetCVE-2021-43790bytecodealliance · CVSS 8.5 · 1.6% likely

   CWE-416

2. Guest-controlled out-of-bounds read/write on x86_64 in wasmtimeCVE-2023-26489bytecodealliance · CVSS 10 · 1.3% likely

   CWE-125

3. Use After Free in WasmtimeCVE-2022-31146bytecodealliance · CVSS 6.4 · 1.3% likely

   CWE-416

4. Use after free in WasmtimeCVE-2022-24791bytecodealliance · CVSS 8.1 · 1.2% likely

   CWE-416

5. An heap overflow vulnerability was discovered in Bytecode alliance wasm-micro-runtime v.1.2.3 allows a remote attacker to cause a denial of service via the wasm_loader_prepare_byt…CVE-2023-48105Bytecodealliance · 1.0% likely

   CWE-787

6. Wasmtime vulnerable to out of bounds read/write with zero-memory-pages configurationCVE-2022-39392bytecodealliance · CVSS 5.9 · 0.8% likely

   CWE-125

7. Invalid drop of partially-initialized instances in wasmtimeCVE-2022-23636bytecodealliance · CVSS 5.1 · 0.8% likely

   CWE-824

8. An out-of-bound memory read vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause a denial of service via the "block_…CVE-2024-34251Bytecodealliance · CVSS 7.5 · 0.8% likely

   CWE-125

9. Miscompilation of wasm `i64x2.shr_s` instruction with constant input on x86_64CVE-2023-41880bytecodealliance · CVSS 2.2 · 0.7% likely

   CWE-193

10. An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to escalate privileges via a crafted file to the check_was_ab…CVE-2024-25431Bytecodealliance · CVSS 8.8 · 0.7% likely

    CWE-125

11. wasmtime is a fast and secure runtime for WebAssembly. Wasmtime's code generation backend, Cranelift, has a bug on x86_64 platforms for the WebAssembly `i8x16.select` instruction…CVE-2023-27477bytecodealliance · CVSS 3.1 · 0.6% likely

    CWE-193

12. wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) 06df58f is vulnerable to NULL Pointer Dereference in function `block_type_get_result_types.CVE-2024-27532Bytecodealliance · CVSS 7.5 · 0.5% likely

    CWE-476

13. Memory access due to code generation flaw in Cranelift moduleCVE-2021-32629bytecodealliance · CVSS 7.2 · 0.5% likely

    CWE-788

14. Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilationCVE-2026-115889bytecodealliance · CVSS 9.9 · 0.5% likelycovered by CyberSIXT

    CWE-1973 articles

15. WAMR fast interpreter loader heap buffer overflow via constant deduplication mismatchCVE-2026-54912bytecodealliance · CVSS 8.8 · 0.5% likely

    CWE-787

16. Wasmtime: Panic lowering a host-created component model stream into a guest that expects a different payload typeCVE-2026-115892bytecodealliance · CVSS 5.7 · 0.4% likely

    CWE-843

17. wasmtime_trap_code C API function has out of bounds write vulnerabilityCVE-2022-39394bytecodealliance · CVSS 3.8 · 0.4% likely

    CWE-787

18. WebAssembly Micro Runtime: Heap Buffer Overflow in WAMR WASI poll_oneoff Output BufferCVE-2026-54914bytecodealliance · CVSS 8.3 · 0.4% likely

    CWE-122

19. Wasmtime has a Heap OOB read in component model UTF-16 to latin1+utf16 string transcodingCVE-2026-34941bytecodealliance · CVSS 6.9 · 0.4% likely

    CWE-125

20. WAMR runtime hangs or crashes with large memory.fill addresses in LLVM-JIT modeCVE-2025-58749bytecodealliance · CVSS 2.1 · 0.4% likely

    CWE-822

21. Wasmtime panics when transcoding misaligned utf-16 stringsCVE-2026-34942bytecodealliance · CVSS 5.9 · 0.4% likely

    CWE-129

22. Wrong type for `Linker`-define functions when used across two `Engine`sCVE-2021-39219bytecodealliance · CVSS 6.3 · 0.4% likely

    CWE-843

23. WebAssembly Micro Runtime frame_offset_bottom array bounds overflow in fast Interpreter mode when handling GET_GLOBAL(I32) followed by if opcodeCVE-2025-64713bytecodealliance · CVSS 5.1 · 0.4% likely

    CWE-119

24. Wasmtime leaks host data with 64-bit tables and WinchCVE-2026-34945bytecodealliance · CVSS 2.3 · 0.3% likely

    CWE-681

25. A heap buffer overflow vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remote attacker to cause at least a denial of service via the "wa…CVE-2024-34250Bytecodealliance · CVSS 6.2 · 0.3% likely

    CWE-122

26. Wasmtime miscompiled guest heap access enables sandbox escape on aarch64 CraneliftCVE-2026-34971bytecodealliance · CVSS 7.8 · 0.3% likely

    CWE-125

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.