CVE-2025-15572

Source
https://cve.org/CVERecord?id=CVE-2025-15572
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-15572.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-15572
Published
2026-02-10T15:32:08.031Z
Modified
2026-08-12T03:51:49.445039179Z
Severity
  • 1.9 (Low) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
wasm3 NewCodePage memory leak
Details

A vulnerability has been found in wasm3 up to 0.5.0. The affected element is the function NewCodePage. The manipulation leads to memory leak. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. Unfortunately, the project has no active maintainer at the moment.

Database specific
{
    "cwe_ids": [
        "CWE-401",
        "CWE-404"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/15xxx/CVE-2025-15572.json",
    "cna_assigner": "VulDB",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "0.1"
                },
                {
                    "last_affected": "0.1"
                },
                {
                    "introduced": "0.2"
                },
                {
                    "last_affected": "0.2"
                },
                {
                    "introduced": "0.3"
                },
                {
                    "last_affected": "0.3"
                },
                {
                    "introduced": "0.4"
                },
                {
                    "last_affected": "0.4"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/wasm3/wasm3

Affected ranges

Type
GIT
Repo
https://github.com/wasm3/wasm3
Events
Database specific
Show details
{
    "cpe": "cpe:2.3:a:wasm3_project:wasm3:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0.5.0"
        },
        {
            "last_affected": "0.5.0"
        },
        {
            "introduced": "0"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ]
}

Affected versions

0.*
0.5.0
v0.*
v0.5.0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-15572.json"