GCVE - cpe:2.3:a:webassembly:wabt:1.0.36:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:webassembly:wabt:1.0.36:*:*:*:*:*:*:*

part: a version: 1.0.36 update: *

Vendor	Webassembly (`b9c28f57-7e0a-59a3-be75-665c271336b8`)
Product	Wabt (`5ad3f330-d749-5387-8fe6-08635dc2dd34`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/webassembly/wabt`	purl2cpe	2026-06-01 10:16:59.440657
`pkg:golang/github.com/webassembly/wabt`	purl2cpe	2026-06-01 10:16:59.440658

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-2584`	vulnerable	2026-06-08 07:16:57.599785	WebAssembly wabt binary-reader-interp.cc GetReturnCallDropKeepCount heap-based overflow MEDIUM (5) A vulnerability was found in WebAssembly wabt 1.0.36. It has been declared as critical. This vulnerability affects the function BinaryReaderInterp::GetReturnCallDropKeepCount of the file wabt/src/interp/binary-reader-interp.cc. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. Published: 2025-03-21T07:31:03.732Z Updated: 2025-03-21T12:29:54.383Z Open on db.gcve.eu Reference links https://vuldb.com/?id.300544 https://vuldb.com/?ctiid.300544 https://vuldb.com/?submit.515406 https://github.com/WebAssembly/wabt/issues/2557 https://github.com/WebAssembly/wabt/issues/2557#issue-2900405517	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-2368`	vulnerable	2026-06-08 07:16:56.889507	WebAssembly wabt Malformed File binary-reader-interp.cc OnExport heap-based overflow MEDIUM (6.3) A vulnerability was found in WebAssembly wabt 1.0.36 and classified as critical. This issue affects the function wabt::interp::(anonymous namespace)::BinaryReaderInterp::OnExport of the file wabt/src/interp/binary-reader-interp.cc of the component Malformed File Handler. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. Published: 2025-03-17T08:00:05.922Z Updated: 2025-03-17T16:25:00.678Z Open on db.gcve.eu Reference links https://vuldb.com/?id.299867 https://vuldb.com/?ctiid.299867 https://vuldb.com/?submit.515327 https://github.com/WebAssembly/wabt/issues/2556 https://github.com/WebAssembly/wabt/issues/2537	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.