CVE-2025-6272

Katalog CVE

CVSS 3.3 · Low EPSS 0,23%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada wasm3 project wasm3. Skor CVSS 3.1 3.3 (Low) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability has been found in wasm3 0.5.0 and classified as problematic. This vulnerability affects the function MarkSlotAllocated of the file source/m3_compile.c. The manipulation leads to out-of-bounds write. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.

Rincian

Terbit di NVD

19 Juni 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

3.3 (Low), sumber vuldb.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,23% peluang dieksploitasi; lebih tinggi dari 13,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://vuldb.com/?ctiid.313276 permissions required · advisory pihak ketiga · vdb entry
• https://vuldb.com/?id.313276 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.593008 advisory pihak ketiga · vdb entry
• https://github.com/user-attachments/files/19516600/wasm3_crash.txt exploit
• https://github.com/wasm3/wasm3/issues/531 exploit · issue tracking