CVE-2025-15411

A weakness has been identified in WebAssembly wabt up to 1.0.39. This vulnerability affects the function wabt::AST::InsertNode of the file /src/repro/wabt/bin/wasm-decompile of the component wasm-decompile. This manipulation causes memory corruption. It is possible to launch the attack on the local host. The exploit has been made available to the public and could be used for attacks. Unfortunately, the project has no active maintainer at the moment. In a reply to the issue report somebody recommended to the researcher to provide a PR himself.

• CWE-119

• https://github.com/WebAssembly/wabt/
• https://github.com/WebAssembly/wabt/issues/2679Exploit, Issue Tracking, Vendor Advisory
• https://github.com/oneafter/1208/blob/main/af1Exploit
• https://vuldb.com/?ctiid.339332Permissions Required, VDB Entry
• https://vuldb.com/?id.339332Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.719825Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.736404

Published

Jan 1, 2026

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-15405A vulnerability was detected in PHPEMS up to 11.0. The impac…8.8
• CVE-2025-15406A flaw has been found in PHPGurukul Online Course Registrati…8.8
• CVE-2025-15407A vulnerability has been found in code-projects Online Guita…9.8
• CVE-2025-15408A vulnerability was found in code-projects Online Guitar Sto…9.8
• CVE-2025-15409A vulnerability was determined in code-projects Online Guita…9.8
• CVE-2025-15410A vulnerability was identified in code-projects Online Guita…9.8
• CVE-2025-15412A security vulnerability has been detected in WebAssembly wa…7.8
• CVE-2025-15413A vulnerability was detected in wasm3 up to 0.5.0. Impacted …7.8
• CVE-2025-15414A flaw has been found in go-sonic sonic up to 1.1.4. The aff…4.7
• CVE-2025-15415A vulnerability has been found in xnx3 wangmarket up to 6.4.…5.4
• CVE-2025-15416A vulnerability was found in xnx3 wangmarket up to 6.4. This…5.4
• CVE-2025-15417A vulnerability was identified in Open5GS up to 2.7.6. Affec…5.5