CWE-1265

CWE-1265 · 3 records · 3 with a public proof-of-concept

Records the NVD classes under CWE-1265, highest CVSS first.

  1. MEDIUM 5.3CVE-2026-119141public PoC2026-10-29

    Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows malicious Wasm modules to panic the host because the may_leave flag is not cleared during realloc. Attackers can call into the host from realloc while…

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 4.8CVE-2026-119136public PoC2026-10-29

    Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains insufficient checks in Store when mixing async-style and sync-style WebAssembly calls. Embedders re-entering WebAssembly via sync APIs from host functions called asynchronously can trigger runtime…

    AI risk analysis on Exploit-DB.ai →

  3. UNSCOREDCVE-2026-104608public PoC2026-11-03

    A remote code execution vulnerability was identified in GitHub Enterprise Server in the Git service (babeld). babeld held references into internal collections while calling into the SSH library, where a re-entrant callback could modify a collection and invalid…

    AI risk analysis on Exploit-DB.ai →