Medium severity5.0NVD Advisory· Published Mar 21, 2025· Updated Jun 17, 2026
CVE-2025-2584
CVE-2025-2584
Description
A vulnerability was found in WebAssembly wabt 1.0.36. It has been declared as critical. This vulnerability affects the function BinaryReaderInterp::GetReturnCallDropKeepCount of the file wabt/src/interp/binary-reader-interp.cc. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:webassembly:wabt:1.0.36:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:webassembly:wabt:1.0.36:*:*:*:*:*:*:*
- (no CPE)range: =1.0.36
- (no CPE)range: 1.0.36
Patches
Vulnerability mechanics
References
5- github.com/WebAssembly/wabt/issues/2557nvdExploitIssue Tracking
- github.com/WebAssembly/wabt/issues/2557nvdExploitIssue Tracking
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdPermissions RequiredVDB Entry
News mentions
0No linked articles in our index yet.