VulnerabilityModified
CVE-2025-15413
A vulnerability was detected in wasm3 up to 0.5.0.
LOW 1.9EPSS 0.20%
Does this matter?
Lower severity and a low EPSS score (0.20%). Track it; it rarely justifies an emergency change on its own.
Description
A vulnerability was detected in wasm3 up to 0.5.0. Impacted is the function op_SetSlot_i32/op_CallIndirect of the file m3_exec.h. Performing a manipulation results in memory corruption. The attack needs to be approached locally. The exploit is now public and may be used. Unfortunately, the project has no active maintainer at the moment.
- CVSS 4.0
- 1.9 LOWCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.20% probability · 10th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119, CWE-787
- Affected
- wasm3 project/wasm3
- Source
- cna@vuldb.com
References
- https://github.com/wasm3/wasm3/
- https://github.com/wasm3/wasm3/issues/543Exploit, Issue Tracking
- https://github.com/wasm3/wasm3/issues/547Exploit, Issue Tracking
- https://vuldb.com/?ctiid.339334Permissions Required, VDB Entry
- https://vuldb.com/?id.339334Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.719829Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.719831Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.