CVE-2025-6272

low

Published 2025-06-19 · Modified 2026-05-21

CVSS v3

3.3

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CVSS v2

1.7

VIR risk

3.3

Description

A vulnerability has been found in wasm3 0.5.0 and classified as problematic. This vulnerability affects the function MarkSlotAllocated of the file source/m3_compile.c. The manipulation leads to out-of-bounds write. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.

Predictions

Exploit likelihood

34%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

Package impact

Ecosystem	Package	Vulnerable	Fixed
PyPI	pywasm3	`<=0.5.0`

Application impact

Vendor	Product	Versions	Fixed
wasm3_project	wasm3	`0.5.0`

References

https://github.com/user-attachments/files/19516600/wasm3_crash.txt
https://github.com/wasm3/wasm3/issues/531
https://vuldb.com/?ctiid.313276
https://vuldb.com/?id.313276
https://vuldb.com/?submit.593008

CWEs

CWE-119 CWE-787

Verify integrity in audit chain (admin only). AS-IS.