CVE-2025-14957

A vulnerability was identified in WebAssembly Binaryen up to 125. This affects the function IRBuilder::makeLocalGet/IRBuilder::makeLocalSet/IRBuilder::makeLocalTee of the file src/wasm/wasm-ir-builder.cpp of the component IRBuilder. Such manipulation of the argument Index leads to null pointer dereference. Local access is required to approach this attack. The exploit is publicly available and might be used. The name of the patch is 6fb2b917a79578ab44cf3b900a6da4c27251e0d4. Applying a patch is advised to resolve this issue.

• CWE-404
• CWE-476
• CWE-476

• https://github.com/WebAssembly/binaryen/
• https://github.com/WebAssembly/binaryen/commit/6fb2b917a79578ab44cf3b900a6da4c27251e0d4Patch
• https://github.com/WebAssembly/binaryen/issues/8090Exploit, Issue Tracking, Third Party Advisory
• https://github.com/WebAssembly/binaryen/pull/8099Issue Tracking
• https://github.com/oneafter/1204/blob/main/af1Not Applicable
• https://vuldb.com/?ctiid.337593Permissions Required, VDB Entry
• https://vuldb.com/?id.337593Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.717317Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.717319Third Party Advisory, VDB Entry

Published

Dec 19, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-14951A security vulnerability has been detected in code-projects …9.8
• CVE-2025-14952A vulnerability was detected in Campcodes Supplier Managemen…9.8
• CVE-2025-14953A flaw has been found in Open5GS up to 2.7.5. This impacts t…5.3
• CVE-2025-14954A vulnerability has been found in Open5GS up to 2.7.6. Affec…5.9
• CVE-2025-14955A vulnerability was found in Open5GS up to 2.7.5. Affected b…3.7
• CVE-2025-14956A vulnerability was determined in WebAssembly Binaryen up to…7.1
• CVE-2025-14958A security flaw has been discovered in floooh sokol up to 33…7.8
• CVE-2025-14959A weakness has been identified in code-projects Simple Stock…9.8
• CVE-2025-1496Improper Restriction of Excessive Authentication Attempts vu…6.5
• CVE-2025-14960A security vulnerability has been detected in code-projects …9.8
• CVE-2025-14961A vulnerability was detected in code-projects Simple Blood D…9.8
• CVE-2025-14962A flaw has been found in code-projects Simple Stock System 1…6.1