CVE-2025-15413

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-15413

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-15413.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-15413

Published

2026-01-01T21:02:06.923Z

Modified

2026-07-15T01:49:05.369991569Z

Severity

1.9 (Low) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

wasm3 m3_exec.h op_CallIndirect memory corruption

Details

A vulnerability was detected in wasm3 up to 0.5.0. Impacted is the function opSetSloti32/opCallIndirect of the file m3exec.h. Performing a manipulation results in memory corruption. The attack needs to be approached locally. The exploit is now public and may be used. Unfortunately, the project has no active maintainer at the moment.

Database specific

{
    "cna_assigner": "VulDB",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "0.1"
                },
                {
                    "last_affected": "0.1"
                },
                {
                    "introduced": "0.2"
                },
                {
                    "last_affected": "0.2"
                },
                {
                    "introduced": "0.3"
                },
                {
                    "last_affected": "0.3"
                },
                {
                    "introduced": "0.4"
                },
                {
                    "last_affected": "0.4"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/15xxx/CVE-2025-15413.json",
    "cwe_ids": [
        "CWE-119"
    ]
}

References

Affected packages

Git / github.com/wasm3/wasm3

Affected ranges

Type

GIT

Repo

https://github.com/wasm3/wasm3

Events

Introduced

6b8bcb1e07bf26ebef09a7211b0a37a446eafd52

Last affected

6b8bcb1e07bf26ebef09a7211b0a37a446eafd52

Database specific

{
    "cpe": "cpe:2.3:a:wasm3_project:wasm3:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0.5.0"
        },
        {
            "last_affected": "0.5.0"
        },
        {
            "introduced": "0"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ]
}

Affected versions

0.*

0.5.0

v0.*

v0.5.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-15413.json"