{"id":"CVE-2025-6275","summary":"WebAssembly wabt binary-reader-interp.cc GetFuncOffset use after free","details":"A vulnerability was found in WebAssembly wabt up to 1.0.37. It has been declared as problematic. Affected by this vulnerability is the function GetFuncOffset of the file src/interp/binary-reader-interp.cc. The manipulation leads to use after free. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. A similar issue reported during the same timeframe was disputed by the code maintainer because it might not affect \"real world wasm programs\". Therefore, this entry might get disputed as well in the future.","modified":"2026-10-22T10:33:00.068841746Z","published":"2025-06-19T19:31:06.618Z","database_specific":{"cna_assigner":"VulDB","cwe_ids":["CWE-119","CWE-416"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/6xxx/CVE-2025-6275.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/6xxx/CVE-2025-6275.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-6275"},{"type":"ADVISORY","url":"https://vuldb.com/?id.313279"},{"type":"ADVISORY","url":"https://vuldb.com/?submit.593017"},{"type":"REPORT","url":"https://github.com/WebAssembly/wabt/issues/2614"},{"type":"REPORT","url":"https://vuldb.com/?ctiid.313279"},{"type":"EVIDENCE","url":"https://github.com/user-attachments/files/20623626/wabt_crash_5.txt"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/webassembly/wabt","events":[{"introduced":"ee0ce7cde5e5fb4ed21d5425629ae447eb433109"},{"fixed":"5e81f6aeddf94fd7743c8c2049f5084c74ff6ab1"}],"database_specific":{"extracted_events":[{"strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.0"},{"last_affected":"1.0.0"}],"source":"AFFECTED_FIELD"},{"strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.1"},{"last_affected":"1.0.1"}],"source":"AFFECTED_FIELD"},{"range":[{"introduced":"1.0.2"},{"last_affected":"1.0.2"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.3"},{"last_affected":"1.0.3"}]},{"range":[{"introduced":"1.0.4"},{"last_affected":"1.0.4"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"1.0.5"},{"last_affected":"1.0.5"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.6"},{"last_affected":"1.0.6"}]},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.7"},{"last_affected":"1.0.7"}]},{"strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.8"},{"last_affected":"1.0.8"}],"source":"AFFECTED_FIELD"},{"strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.9"},{"last_affected":"1.0.9"}],"source":"AFFECTED_FIELD"},{"range":[{"introduced":"1.0.10"},{"last_affected":"1.0.10"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"1.0.11"},{"last_affected":"1.0.11"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.12"},{"last_affected":"1.0.12"}]},{"strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.13"},{"last_affected":"1.0.13"}],"source":"AFFECTED_FIELD"},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.14"},{"last_affected":"1.0.14"}]},{"range":[{"introduced":"1.0.15"},{"last_affected":"1.0.15"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"1.0.16"},{"last_affected":"1.0.16"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"1.0.17"},{"last_affected":"1.0.17"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"1.0.18"},{"last_affected":"1.0.18"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.19"},{"last_affected":"1.0.19"}],"source":"AFFECTED_FIELD"},{"range":[{"introduced":"1.0.20"},{"last_affected":"1.0.20"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.21"},{"last_affected":"1.0.21"}]},{"strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.22"},{"last_affected":"1.0.22"}],"source":"AFFECTED_FIELD"},{"range":[{"introduced":"1.0.23"},{"last_affected":"1.0.23"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.24"},{"last_affected":"1.0.24"}]},{"strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.25"},{"last_affected":"1.0.25"}],"source":"AFFECTED_FIELD"},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.26"},{"last_affected":"1.0.26"}]},{"range":[{"introduced":"1.0.27"},{"last_affected":"1.0.27"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"1.0.28"},{"last_affected":"1.0.28"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.29"},{"last_affected":"1.0.29"}],"source":"AFFECTED_FIELD"},{"strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.30"},{"last_affected":"1.0.30"}],"source":"AFFECTED_FIELD"},{"range":[{"introduced":"1.0.31"},{"last_affected":"1.0.31"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"introduced":"1.0.32"},{"last_affected":"1.0.32"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.33"},{"last_affected":"1.0.33"}],"source":"AFFECTED_FIELD"},{"range":[{"introduced":"1.0.34"},{"last_affected":"1.0.34"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.35"},{"last_affected":"1.0.35"}]},{"strategy":"StandaloneSingleVersion","range":[{"introduced":"1.0.36"},{"last_affected":"1.0.36"}],"source":"AFFECTED_FIELD"},{"range":[{"introduced":"1.0.37"},{"last_affected":"1.0.37"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"source":"CPE_RANGE","cpe":"cpe:2.3:a:webassembly:wabt:*:*:*:*:*:*:*:*","range":[{"introduced":"0"},{"fixed":"1.0.37"}]}]}}],"versions":["1.0.0","1.0.1","1.0.10","1.0.11","1.0.12","1.0.13","1.0.14","1.0.16","1.0.17","1.0.18","1.0.19","1.0.2","1.0.20","1.0.21","1.0.22","1.0.23","1.0.24","1.0.25","1.0.26","1.0.27","1.0.28","1.0.29","1.0.3","1.0.30","1.0.31","1.0.32","1.0.33","1.0.34","1.0.35","1.0.36","1.0.37","1.0.4","1.0.5","1.0.6","1.0.7","1.0.8","1.0.9","gh-actions-test2","gh-actions-test","1.0.15"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-6275.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"}]}