CVE-2025-15412Medium· 5.3▾ SunlitA security vulnerability has been detected in WebAssembly wabt up to 1.0.39. This issue affects the function wabt::Decompiler::VarName of the file /src/repro/wabt/bin/wasm-decompile of the component wasm-decompile. Such manipulation lead…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
A security vulnerability has been detected in WebAssembly wabt up to 1.0.39. This issue affects the function wabt::Decompiler::VarName of the file /src/repro/wabt/bin/wasm-decompile of the component wasm-decompile. Such manipulation leads to out-of-bounds read. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used. Unfortunately, the project has no active maintainer at the moment. In a reply to the issue report somebody recommended to the researcher to provide a PR himself.
wabt <= 1.0.39Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-15411Medium· 5.3A weakness has been identified in WebAssembly wabt up to 1.0.39
CVE-2025-11494Low· 3.3A vulnerability was found in GNU Binutils 2.45
CVE-2026-90648High· 7.1wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack
CVE-2025-11081Low· 3.3A vulnerability was detected in GNU Binutils 2.45
CVE-2026-101204Medium· 6.3A vulnerability was found in FastStone Image Viewer up to 8.3
CVE-2026-101205Medium· 6.3A vulnerability was determined in FastStone Image Viewer up to 8.3