CVE-2026-35195: Wasmtime Cranelift Out Of Line Passive Datacve-2026-35195-wasmtime-cranelift-out-of-line-passive-data
Using out-of-line libcalls for WebAssembly passive data segment operations (like `memory.init`, `data.drop`, `array.new_data`) is vulnerable to out-of-bounds memory access. The libcalls lack inline unbypassable JIT bounds checking and may race with mutations or yields, leading to unchecked memory accesses. Natively generate checking logic by safely reading p
