← Database

CVE-2025-14956

MEDIUM CVSS: 5.3 Published: 2025-12-19 Modified: 2026-06-17

Description

A vulnerability was determined in WebAssembly Binaryen up to 125. Affected by this issue is the function WasmBinaryReader::readExport of the file src/wasm/wasm-binary.cpp. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. Patch name: 4f52bff8c4075b5630422f902dd92a0af2c9f398. It is recommended to apply a patch to fix this issue.

Affected Platforms

Webassembly Binaryen

Weakness Type

CWE-119, CWE-122, CWE-125

References