Out-of-bounds Write Vulnerability in wasm3 by wasm3
CVE-2025-6272

4.8MEDIUM

Key Information:

Vendor: wasm3
Status: Wasm3
Vendor: CVE Published:; 19 June 2025

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2025-6272?

A significant vulnerability has been identified in wasm3 version 0.5.0, specifically within the function MarkSlotAllocated found in the file source/m3_compile.c. This flaw allows for an out-of-bounds write condition, which could potentially be exploited locally. The details of this vulnerability have been publicly disclosed, raising concerns about its implications for security within the affected version. Users and administrators are encouraged to apply patches or mitigations as they become available to protect their systems from potential exploitation.

Affected Version(s)

wasm3 0.5.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2025-6272 - Proof of Concept