CVE-2025-14956: WebAssembly Binaryen wasm-binary.cpp readExport heap-based overflow
A vulnerability was determined in WebAssembly Binaryen up to 125. Affected by this issue is the function WasmBinaryReader::readExport of the file src/wasm/wasm-binary.cpp. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. Patch name: 4f52bff8c4075b5630422f902dd92a0af2c9f398. It is recommended to apply a patch to fix this issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/binaryento a version that resolves this vulnerability.Fixed in 129-r0 - Upgrade
Upgrade
debian/binaryento a version that resolves this vulnerability.Fixed in 130-2 - Upgrade
Upgrade
debian/binaryento a version that resolves this vulnerability.Fixed in 131-2 - Upgrade
Upgrade
WebAssembly Binaryento a version that resolves this vulnerability.Patch 4f52bff8c4075b5630422f902dd92a0af2c9f398
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14956?
CVE-2025-14956 is categorized as a medium severity vulnerability due to its potential to cause a heap-based buffer overflow.
How do I fix CVE-2025-14956?
To fix CVE-2025-14956, upgrade WebAssembly Binaryen to version 126 or later.
What software is affected by CVE-2025-14956?
CVE-2025-14956 affects WebAssembly Binaryen versions up to and including 125.
Can CVE-2025-14956 be exploited remotely?
CVE-2025-14956 requires local access to the host to exploit the vulnerability.
What is the nature of the vulnerability in CVE-2025-14956?
CVE-2025-14956 involves a heap-based buffer overflow in the WasmBinaryReader::readExport function.