PT-2025-52491 · Binaryen+1 · Binaryen+1

·

CVE-2025-14956

·

Published

2025-12-19

·

Updated

2026-07-31

CVSS v3.1

7.1

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions WebAssembly Binaryen versions prior to 126
Description A heap-based buffer overflow issue exists in the WasmBinaryReader::readExport function within the src/wasm/wasm-binary.cpp file. This manipulation can be exploited on the local host. The exploit has been publicly disclosed. The vulnerable code is located in the WasmBinaryReader::readExport function.
Recommendations Apply the patch 4f52bff8c4075b5630422f902dd92a0af2c9f398 to resolve this issue.

Exploit

Fix

DoS

Heap Based Buffer Overflow

Out of bounds Read

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-14956
JLSEC-2026-1092

Affected Products

Binaryen
Debian