CVE-2025-2368
A vulnerability was found in WebAssembly wabt 1.0.36 and classified as critical. This issue affects the function wabt::interp::(anonymous namespace)::BinaryReaderInterp::OnExport of the file wabt/s...
Affects 1 product across 1 vendor.
Parent class for buffer-related vulnerabilities where operations exceed buffer boundaries.
Buffer overflow corrupting dynamically allocated heap memory, exploitable for arbitrary code execution.
Software writes data past buffer boundaries, corrupting memory and potentially enabling code execution.
Show all 13
Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.
A high severity vulnerability affects Webassembly systems (CVE-2025-2368). No public exploit code is currently available. Apply available vendor patches promptly.
BSID: BS-2025-GLOBAL-250698-H • Model: rule-based-v1 • Confidence: MEDIUM
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2025-2368?
What is the CVSS score for CVE-2025-2368?
Is CVE-2025-2368 actively exploited?
How do I remediate CVE-2025-2368?
What systems are affected by CVE-2025-2368?
| CVE ID | CVE-2025-2368 |
|---|---|
| BSID | BS-2025-GLOBAL-250698-H BreachSpider Global ID |
| CVSS Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| Published | 2025-03-17 |
| Last Modified | 2026-06-17 |
| ICS Relevance | 15% |
| Weakness (CWE) | |
| Source | NVD |
A vulnerability was found in WebAssembly wabt 1.0.36 and classified as critical. This issue affects the function wabt::interp::(anonymous namespace)::BinaryReaderInterp::OnExport of the file wabt/src/interp/binary-reader-interp.cc of the component Malformed File Handler. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.
Source: NIST NVD / MITRE CVE Database
Vulnerability details: A vulnerability was found in WebAssembly wabt 1.0.36 and classified as critical. This issue affects the function wabt::interp::(anonymous namespace)::BinaryReaderInterp::OnExport of the file wabt/src/interp/binary-reader-interp.cc of the component Malformed File Handler. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
Exploitation Likelihood: MINIMAL
| Vendor | Product | Affected Versions |
|---|---|---|
| Webassembly | Wabt | 1.0.36 |
No official vendor advisory link on record. See the CVE record →
| CISA known-exploited | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
AI Enrichment Record — provenance & audit hash
| Model | rule-based-v1 |
|---|---|
| Confidence | MEDIUM |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | 0c26f503b080c1892a80d3cbb97c7e11e1f231df5b7c35d73a086ec6be5eb5c1dbe5f5056e44b519b1be2f922430ae79d2af2cb228babd9cdcfa035689199ac0 |
ICS/OT Vulnerability Intelligence for Your Environment
BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.
Create a free account →