CVE-2025-6274CWE-400CWE-404

WebAssembly wabt binary-reader-interp.cc OnDataCount resource consumption

Medium · published June 19, 2025

CVSS v4.0
4.8
EPSS
0%
Percentile
13.1
In the wild
Unconfirmed
What it is

A vulnerability was found in WebAssembly wabt up to 1.0.37. It has been classified as problematic. Affected is the function OnDataCount of the file src/interp/binary-reader-interp.cc. The manipulation leads to resource consumption. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. A similar issue reported during the same timeframe was disputed by the code maintainer because it might not affect "real world wasm programs". Therefore, this entry might get disputed as well in the future.

The record
Technical detail
CVSS v4.0
4.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.00230 · 13.1th percentile
Weaknesses
CWE-400 · Uncontrolled Resource Consumption; CWE-404 · Improper Resource Shutdown or Release
Published
2025-06-19T19:00Z
EPSS history
Timeline
  • 19 JUN 19:00Z
    WebAssembly wabt binary-reader-interp.cc OnDataCount resource consumption
    cvelistv5