CVE-2025-14956 - CERT CVE
ID CVE-2025-14956
Sažetak A vulnerability was determined in WebAssembly Binaryen up to 125. Affected by this issue is the function WasmBinaryReader::readExport of the file src/wasm/wasm-binary.cpp. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. Patch name: 4f52bff8c4075b5630422f902dd92a0af2c9f398. It is recommended to apply a patch to fix this issue.
Reference
CVSS
Base: 4.3
Impact: 6.4
Exploitability:3.1
Pristup
VektorSloženostAutentikacija
LOCAL LOW SINGLE
Impact
PovjerljivostCjelovitostDostupnost
PARTIAL PARTIAL PARTIAL
CVSS vektor AV:L/AC:L/Au:S/C:P/I:P/A:P
Zadnje važnije ažuriranje 19-12-2025 - 18:00
Objavljeno 19-12-2025 - 17:15