wasm-micro-runtime

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. WebAssembly Micro Runtime's `--addr-pool` option allows all IPv4 addresses when subnet mask is not specifiedCVE-2025-54126bytecodealliance · CVSS 6.9 · 0.7% likely

   CWE-668

2. WAMR fast interpreter loader heap buffer overflow via constant deduplication mismatchCVE-2026-54912bytecodealliance · CVSS 8.8 · 0.5% likely

   CWE-787

3. WebAssembly Micro Runtime: Heap Buffer Overflow in WAMR WASI poll_oneoff Output BufferCVE-2026-54914bytecodealliance · CVSS 8.3 · 0.4% likely

   CWE-122

4. WAMR runtime hangs or crashes with large memory.fill addresses in LLVM-JIT modeCVE-2025-58749bytecodealliance · CVSS 2.1 · 0.4% likely

   CWE-822

5. WebAssembly Micro Runtime frame_offset_bottom array bounds overflow in fast Interpreter mode when handling GET_GLOBAL(I32) followed by if opcodeCVE-2025-64713bytecodealliance · CVSS 5.1 · 0.4% likely

   CWE-119

6. WebAssembly Micro Runtime: Missing `ref.null` heap-type validation in `load_init_expr` leaks host stack memory to the WebAssembly guestCVE-2026-54913bytecodealliance · CVSS 6.9 · 0.3% likely

   CWE-457

7. iwasm vulnerable to filesystem sandbox escape with symlink when using uvwasi featureCVE-2025-43853bytecodealliance · CVSS 7 · 0.3% likely

   CWE-61

8. WebAssembly Micro Runtime vulnerable to a segmentation fault in v128.store instructionCVE-2025-64704bytecodealliance · CVSS 4.7 · 0.2% likely

   CWE-754

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.