Wasm3
CVE-2025-15572
LOW
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
4DescriptionCVE.org
A vulnerability has been found in wasm3 up to 0.5.0. The affected element is the function NewCodePage. The manipulation leads to memory leak. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. Unfortunately, the project has no active maintainer at the moment.
AnalysisAI
A vulnerability has been found in wasm3 up to 0.5.0. The affected element is the function NewCodePage. [CVSS 3.3 LOW]
Technical ContextAI
Classified as CWE-401 (Memory Leak). Affects Wasm3. A vulnerability has been found in wasm3 up to 0.5.0. The affected element is the function NewCodePage. The manipulation leads to memory leak. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. Unfortunately, the project has no active maintainer at the moment.
RemediationAI
Monitor vendor advisories for a patch.
wasm3 v0.5.0 was discovered to contain a heap buffer overflow which leads to segmentation fault via the function "Deallo
wasm3 139076a contains a Use-After-Free in ForEachModule. Rated high severity (CVSS 8.4), this vulnerability is no authe
wasm3 139076a contains memory leaks in Read_utf8. Rated high severity (CVSS 8.4), this vulnerability is no authenticatio
wasm3 139076a suffers from Invalid Memory Read, leading to DoS and potential Code Execution. Rated high severity (CVSS 8
WASM3 v0.5.0 was discovered to contain a heap overflow via the component /wabt/bin/poc.wasm. Rated high severity (CVSS 7
wasm3 139076a is vulnerable to Denial of Service (DoS). Rated high severity (CVSS 7.5), this vulnerability is remotely e
wasm3 v0.5.0 was discovered to contain an out-of-bound memory read which leads to segmentation fault via the function "m
wasm3 v0.5.0 was discovered to contain a global buffer overflow which leads to segmentation fault via the function "Pres
WASM3 v0.5.0 was discovered to contain a segmentation fault via the component op_Select_i32_srs in wasm3/source/m3_exec.
wasm3 commit 7890a2097569fde845881e0b352d813573e371f9 was discovered to contain a segmentation fault via the component o
WASM3 v0.5.0 was discovered to contain a segmentation fault via the component Compile_Memory_CopyFill. Rated medium seve
Wasm3 0.5.0 has a heap-based buffer overflow in NewCodePage in m3_code.c (called indirectly from Compile_BranchTable in
Same weakness CWE-401 – Memory Leak
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today