CVE-2025-3122

Name of the Vulnerable Software and Affected Versions WebAssembly wabt version 1.0.36

Description A problematic vulnerability was found in the function BinaryReaderInterp::BeginFunctionBody of the file src/interp/binary-reader-interp.cc, leading to a null pointer dereference. The attack can be launched remotely, but the complexity is rather high and the exploitation appears to be difficult.

Recommendations For WebAssembly wabt version 1.0.36, as a temporary workaround, consider disabling the BinaryReaderInterp::BeginFunctionBody function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.