Race Conditions

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via reallocCVE-2026-119141bytecodealliance · CVSS 5.3 · 0.4% likely

   CWE-1265

2. Wasmtime: Preemption and traps during bulk operations enable breaking internal VM stateCVE-2026-104855bytecodealliance · CVSS 2 · 0.3% likely

   CWE-362

3. Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Async-Entrypoint Enforcement BypassCVE-2026-119136bytecodealliance · CVSS 4.8 · 0.2% likely

   CWE-1265

4. Wasmtime 48.0.0 before 48.0.8 TOCTOU UDP Send Policy Bypass via wasip3 SocketsCVE-2026-126410bytecodealliance · CVSS 6.4 · 0.2% likely

   CWE-367

5. Wasmtime race condition could lead to WebAssembly control-flow integrity and type safety violationsCVE-2024-47813bytecodealliance · CVSS 2.9 · 0.2% likely

   CWE-367

6. Wasmtime provides unsound API access to a WebAssembly shared linear memoryCVE-2025-64345bytecodealliance · CVSS 1.8 · 0.1% likely

   CWE-362

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.