CVE-2025-15413

Katalog CVE

CVSS 7.8 · High EPSS 0,20%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada wasm3 project wasm3. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability was detected in wasm3 up to 0.5.0. Impacted is the function op_SetSlot_i32/op_CallIndirect of the file m3_exec.h. Performing a manipulation results in memory corruption. The attack needs to be approached locally. The exploit is now public and may be used. Unfortunately, the project has no active maintainer at the moment.

Rincian

Terbit di NVD

1 Januari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,20% peluang dieksploitasi; lebih tinggi dari 9,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://vuldb.com/?id.339334 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.719829 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.719831 advisory pihak ketiga · vdb entry
• https://github.com/wasm3/wasm3/issues/543 exploit · issue tracking
• https://github.com/wasm3/wasm3/issues/547 exploit · issue tracking
• https://github.com/wasm3/wasm3/
• https://vuldb.com/?ctiid.339334 permissions required · vdb entry