CVE-2025-15572CWE-401CWE-404
wasm3 NewCodePage memory leak
Medium · published February 10, 2026
What it is
A vulnerability has been found in wasm3 up to 0.5.0. The affected element is the function NewCodePage. The manipulation leads to memory leak. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. Unfortunately, the project has no active maintainer at the moment.
The record
Technical detail
- CVSS v4.0
- 4.8 · MEDIUM
- Vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
- EPSS
- 0.00183 · 7.5th percentile
- Weaknesses
- CWE-401 · Missing Release of Memory after Effective Lifetime; CWE-404 · Improper Resource Shutdown or Release
- Published
- 2026-02-10T15:32Z
EPSS history
Timeline