CVE-2025-6274: WebAssembly wabt binary-reader-interp.cc OnDataCount resource consumption
A vulnerability was found in WebAssembly wabt up to 1.0.37. It has been classified as problematic. Affected is the function OnDataCount of the file src/interp/binary-reader-interp.cc. The manipulation leads to resource consumption. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. A similar issue reported during the same timeframe was disputed by the code maintainer because it might not affect "real world wasm programs". Therefore, this entry might get disputed as well in the future.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6274?
CVE-2025-6274 has been classified as problematic due to its potential to cause resource consumption.
How do I fix CVE-2025-6274?
To mitigate CVE-2025-6274, users should update WebAssembly wabt to a version later than 1.0.37.
What is the impact of exploiting CVE-2025-6274?
Exploiting CVE-2025-6274 can lead to excessive resource consumption on affected systems.
Who is affected by CVE-2025-6274?
The vulnerability affects all users of WebAssembly wabt versions up to and including 1.0.37.
Can CVE-2025-6274 be exploited remotely?
No, exploiting CVE-2025-6274 requires local access to the affected system.