CVE-2025-2584
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-2584
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-2584.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-2584
- Related
- Published
- 2025-03-21T08:15:11Z
- Modified
- 2025-03-25T01:47:33.416387Z
- Severity
-
- 7.4 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
A vulnerability was found in WebAssembly wabt 1.0.36. It has been declared as critical. This vulnerability affects the function BinaryReaderInterp::GetReturnCallDropKeepCount of the file wabt/src/interp/binary-reader-interp.cc. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.
- References
Affected packages
Debian:11 / wabt
Package
- Name
- wabt
- Purl
- pkg:deb/debian/wabt?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Affected versions
1.*
1.0.20-1
1.0.21-1
1.0.24-1
1.0.24-2
1.0.25-1
1.0.26-1
1.0.27-1
1.0.28-1
1.0.29-1
1.0.30-1
1.0.31-1
1.0.32-1
1.0.33-1
1.0.34-1
1.0.34+dsfg2+~cs1.0.32-1
1.0.34+dsfg2+~cs1.0.32-2
1.0.34+dsfg2+~cs1.0.32-3
1.0.34+dsfg2+~cs1.0.32-4
1.0.34+dsfg+~cs1.0.32-1
1.0.36+dfsg+~cs1.0.36-1
1.0.36+dfsg+~cs1.0.36-2
Debian:12 / wabt
Package
- Name
- wabt
- Purl
- pkg:deb/debian/wabt?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Debian:13 / wabt
Package
- Name
- wabt
- Purl
- pkg:deb/debian/wabt?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Git / github.com/webassembly/wabt
Affected ranges
- Type
- GIT
- Repo
- https://github.com/webassembly/wabt
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast affected
Affected versions
1.*
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.22
1.0.23
1.0.24
1.0.25
1.0.26
1.0.27
1.0.28
1.0.29
1.0.3
1.0.30
1.0.31
1.0.32
1.0.33
1.0.34
1.0.35
1.0.36
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
Other
binary_0xa
binary_0xb
binary_0xc
binary_0xd
gh-actions-test
gh-actions-test2