CVE-2025-6274
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
WebAssembly wabt binary-reader-interp.cc OnDataCount resource consumption
A vulnerability was found in WebAssembly wabt up to 1.0.37. It has been classified as problematic. Affected is the function OnDataCount of the file src/interp/binary-reader-interp.cc. The manipulation leads to resource consumption. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. A similar issue reported during the same timeframe was disputed by the code maintainer because it might not affect "real world wasm programs". Therefore, this entry might get disputed as well in the future.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
wabt
- Vendor
- WebAssembly
- Product
- wabt
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1.0.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.3 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.4 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.5 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.6 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.7 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.8 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.9 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.10 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.11 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.12 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.13 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.14 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.15 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.16 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.17 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.18 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.19 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.20 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.21 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.22 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.23 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.24 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.25 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.26 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.27 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.28 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.29 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.30 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.31 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.32 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.33 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.34 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.35 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.36 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 1.0.37 | affected | Unavailable | Unavailable | Unavailable | None listed |