Approved changes feed: RSS · Atom

cpe:2.3:a:wasm3_project:wasm3:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWasm3 Project (83e22634-e69d-5d1d-8578-1061e2072e99)
ProductWasm3 (4232926d-5cd3-5c06-b9dd-a8a9c996fbc2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wasm3/wasm3 purl2cpe 2026-06-01 10:16:46.886618
pkg:rpm/opensuse/wasm3 purl2cpe 2026-06-01 10:16:46.886622

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-15572 vulnerable 2026-06-08 07:06:36.480910 wasm3 NewCodePage memory leak
LOW (3.3)
A vulnerability has been found in wasm3 up to 0.5.0. The affected element is the function NewCodePage. The manipulation leads to memory leak. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. Unfortunately, the project has no active maintainer at the moment.
Published: 2026-02-10T15:32:08.031Z
Updated: 2026-02-23T09:57:11.150Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15413 vulnerable 2026-06-08 07:06:36.212754 wasm3 m3_exec.h op_CallIndirect memory corruption
MEDIUM (5.3)
A vulnerability was detected in wasm3 up to 0.5.0. Impacted is the function op_SetSlot_i32/op_CallIndirect of the file m3_exec.h. Performing a manipulation results in memory corruption. The attack needs to be approached locally. The exploit is now public and may be used. Unfortunately, the project has no active maintainer at the moment.
Published: 2026-01-01T21:02:06.923Z
Updated: 2026-02-23T08:03:55.102Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34249 vulnerable 2026-06-08 06:37:33.093746 Details available
wasm3 v0.5.0 was discovered to contain a heap buffer overflow which leads to segmentation fault via the function "DeallocateSlot" in wasm3/source/m3_compile.c.
Published: 2024-05-06T00:00:00.000Z
Updated: 2024-08-02T02:51:10.505Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34246 vulnerable 2026-06-08 06:37:33.092017 Details available
wasm3 v0.5.0 was discovered to contain an out-of-bound memory read which leads to segmentation fault via the function "main" in wasm3/platforms/app/main.c.
Published: 2024-05-06T00:00:00.000Z
Updated: 2024-08-02T02:51:09.579Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27530 vulnerable 2026-06-08 06:31:29.025166 Details available
wasm3 139076a contains a Use-After-Free in ForEachModule.
Published: 2024-11-08T00:00:00.000Z
Updated: 2025-03-13T18:30:34.966Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27529 vulnerable 2026-06-08 06:31:29.024858 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27528 vulnerable 2026-06-08 06:31:29.024366 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27527 vulnerable 2026-06-08 06:31:29.022895 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.