Log in Start free

Vulnerability · Published Dec 19, 2025 · Assigned by VulDB

CVE-2025-14956WebAssembly Binaryen wasm-binary.cpp readExport heap-based overflow

Medium 5.3

In plain English

A medium-severity heap buffer overflow in Binaryen from WebAssembly. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.2%top 88.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A vulnerability was determined in WebAssembly Binaryen up to 125. Affected by this issue is the function WasmBinaryReader::readExport of the file src/wasm/wasm-binary.cpp. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. Patch name: 4f52bff8c4075b5630422f902dd92a0af2c9f398. It is recommended to apply a patch to fix this issue.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.24binaryen129-r0ALPINE-CVE-2025-14956
Debian:12binaryenno fix listedDEBIAN-CVE-2025-14956
Debian:13binaryenno fix listedDEBIAN-CVE-2025-14956
Debian:14binaryen130-2DEBIAN-CVE-2025-14956
Ubuntu:22.04:LTSbinaryenno fix listedUBUNTU-CVE-2025-14956
Ubuntu:24.04:LTSbinaryenno fix listedUBUNTU-CVE-2025-14956
Ubuntu:25.10binaryenno fix listedUBUNTU-CVE-2025-14956
Ubuntu:26.04:LTSbinaryenno fix listedUBUNTU-CVE-2025-14956
Ubuntu:26.10binaryenno fix listedUBUNTU-CVE-2025-14956

Affected products (as reported)

VendorProductVersions
WebAssembly Binaryen 125

Weakness: CWE-122, CWE-119 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C

References