Unrated
WebAssembly Binaryen wasm-binary.cpp readExport heap-based overflow
CVE-2025-14956
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2025-14956 binaryen
- Ubuntu UBUNTU-CVE-2025-14956 binaryen
Original description The description as published by the source.
A vulnerability was determined in WebAssembly Binaryen up to 125. Affected by this issue is the function WasmBinaryReader::readExport of the file src/wasm/wasm-binary.cpp. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. Patch name: 4f52bff8c4075b5630422f902dd92a0af2c9f398. It is recommended to apply a patch to fix this issue.
References
- advisory github.com
- advisory nvd.nist.gov
- advisory vuldb.com
- advisory vuldb.com
- patch github.com
- report github.com
- report github.com
- report vuldb.com
- report github.com
- web github.com