CVE-2025-6273

Katalog CVE

CVSS 3.3 · Low EPSS 0,23%

Kerentanan Reachable Assertion pada webassembly wabt. Skor CVSS 3.1 3.3 (Low) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability was found in WebAssembly wabt up to 1.0.37 and classified as problematic. This issue affects the function LogOpcode of the file src/binary-reader-objdump.cc. The manipulation leads to reachable assertion. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The code maintainer explains that this issue might not affect "real world wasm programs".

Rincian

Terbit di NVD

19 Juni 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

3.3 (Low), sumber vuldb.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-617: Reachable Assertion

EPSS (30 hari)

0,23% peluang dieksploitasi; lebih tinggi dari 12,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/WebAssembly/wabt/issues/2574 exploit · issue tracking · advisory vendor
• https://vuldb.com/?id.313277 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.593010 advisory pihak ketiga · vdb entry
• https://github.com/user-attachments/files/19529411/wabt_crash.txt exploit
• https://vuldb.com/?ctiid.313277 permissions required · vdb entry