UBUNTU-CVE-2025-15412

A security vulnerability has been detected in WebAssembly wabt up to 1.0.39. This issue affects the function wabt::Decompiler::VarName of the file /src/repro/wabt/bin/wasm-decompile of the component wasm-decompile. Such manipulation leads to out-of-bounds read. Local access is required to approac...

CVE-2025-15411

A weakness has been identified in WebAssembly wabt up to 1.0.39. This vulnerability affects the function wabt::AST::InsertNode of the file /src/repro/wabt/bin/wasm-decompile of the component wasm-decompile. This manipulation causes memory corruption. It is possible to launch the attack on the loc...

Linux Distros Unpatched Vulnerability : CVE-2025-2584

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in WebAssembly wabt 1.0.36. It has been declared as critical. This vulnerability affects the function...

PYSEC-2025-228

A vulnerability was found in WebAssembly wabt 1.0.36. It has been declared as critical. This vulnerability affects the function BinaryReaderInterp::GetReturnCallDropKeepCount of the file wabt/src/interp/binary-reader-interp.cc. The manipulation leads to heap-based buffer overflow. The attack can ...

wabt:wat2wasm_fuzzer: Use-of-uninitialized-value in std::__1::__murmur2_or_cityhash<unsigned long, 64ul>::operator

Project: https://github.com/WebAssembly/wabt.git Detailed Report: https://oss-fuzz.com/testcase?key=5545710765277184 Project: wabt Fuzzing Engine: libFuzzer Fuzz Target: wat2wasmfuzzer Job Type: libfuzzermsanwabt Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State...