Webassembly Binary Toolkit

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. An issue in wasm2c 1.0.32, wasm2wat 1.0.32, wasm-decompile 1.0.32, and wasm-validate 1.0.32 allows attackers to cause a Denial of Service (DoS) via running a crafted binary.CVE-2023-31670Webassembly · CVSS 7.5 · 0.8% likely
2. WebAssembly wabt 1.0.33 contains an Out-of-Bound Memory Write in DataSegment::Drop(), which lead to segmentation fault.CVE-2023-46332Webassembly · 0.3% likely

   CWE-787

3. WebAssembly wat2wasm v1.0.32 allows attackers to cause a libc++abi.dylib crash by putting '@' before a quote (").CVE-2023-31669Webassembly · CVSS 5.5 · 0.3% likely

   CWE-116

4. WebAssembly wabt 1.0.33 has an Out-of-Bound Memory Read in in DataSegment::IsValidRange(), which lead to segmentation fault.CVE-2023-46331Webassembly · 0.2% likely

   CWE-125

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.