PT-2025-52491 · Binaryen+1 · Binaryen+1

Oneafter · Published 2025-12-19 · Updated 2026-04-30 · CVE-2025-14956

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions WebAssembly Binaryen versions prior to 126

Description A heap-based buffer overflow issue exists in the WasmBinaryReader::readExport function within the src/wasm/wasm-binary.cpp file. This manipulation can be exploited on the local host. The exploit has been publicly disclosed. The vulnerable code is located in the WasmBinaryReader::readExport function.

Recommendations Apply the patch 4f52bff8c4075b5630422f902dd92a0af2c9f398 to resolve this issue.

Exploit

Fix

Out of bounds Read

Heap Based Buffer Overflow

Buffer Overflow

Weakness Enumeration

CWE-125

CWE-122

CWE-119

Related Identifiers

CVE-2025-14956

Affected Products

Binaryen

Debian

References · 21

• 🔥 https://github.com/WebAssembly/binaryen/issues/8089 · Exploit
• 🔥 https://github.com/oneafter/1204/blob/main/hbf · Exploit
• 🔥 https://vuldb.com/?submit.717315 · Exploit
• https://github.com/WebAssembly/binaryen/commit/4f52bff8c4075b5630422f902dd92a0af2c9f398 · Patch
• https://cve.org/CVERecord?id=CVE-2025-14956 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-14956 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-14956 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-14956 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-14956 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-14956 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-14956 · Security Note
• https://github.com/WebAssembly/binaryen/pull/8092 · Note
• https://vuldb.com/?id.337592 · Note
• https://t.me/cveNotify/146364 · Telegram Post
• https://t.me/cveNotify/147205 · Telegram Post