CVE-2025-15572

Katalog CVE

CVSS 5.5 · Medium EPSS 0,18%

Kerentanan Missing Release of Memory after Effective Lifetime pada wasm3 project wasm3. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability has been found in wasm3 up to 0.5.0. The affected element is the function NewCodePage. The manipulation leads to memory leak. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. Unfortunately, the project has no active maintainer at the moment.

Rincian

Terbit di NVD

10 Februari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-401: Missing Release of Memory after Effective Lifetime
CWE-404: Improper Resource Shutdown or Release

EPSS (30 hari)

0,18% peluang dieksploitasi; lebih tinggi dari 7,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://vuldb.com/?id.344934 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.752765 advisory pihak ketiga · vdb entry
• https://github.com/oneafter/cve-proofs/blob/main/POC-20251203-07/repro exploit
• https://github.com/wasm3/wasm3/issues/550 exploit · issue tracking
• https://github.com/wasm3/wasm3/ product
• https://vuldb.com/?ctiid.344934 permissions required · vdb entry