Approved changes feed: RSS · Atom

cpe:2.3:a:webassembly:webassembly_binary_toolkit:1.0.36:*:*:*:*:*:*:*

part: a version: 1.0.36 update: *

VendorWebassembly (b9c28f57-7e0a-59a3-be75-665c271336b8)
ProductWebassembly Binary Toolkit (2ed07982-6945-5d37-a9de-12c8102869f3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/webassembly/wabt purl2cpe 2026-06-01 10:16:59.312816
pkg:golang/github.com/webassembly/wabt purl2cpe 2026-06-01 10:16:59.312818

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-3122 vulnerable 2026-06-08 07:23:08.186172 WebAssembly wabt binary-reader-interp.cc BeginFunctionBody null pointer dereference
LOW (3.1)
A vulnerability classified as problematic was found in WebAssembly wabt 1.0.36. Affected by this vulnerability is the function BinaryReaderInterp::BeginFunctionBody of the file src/interp/binary-reader-interp.cc. The manipulation leads to null pointer dereference. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.
Published: 2025-04-02T22:00:14.705Z
Updated: 2025-04-03T19:18:20.492Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.