GitHub Advisoryadvisory · PyPI
GHSA-rrmw-gv85-w824 pywasm3 has Improper Restriction of Operations within the Bounds of a Memory Buffer
LOW
Official page ↗
- Aliases
- CVE-2025-6272
- Ecosystem
- PyPI
- Packages
- pywasm3
- Severity
- Low
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
- Weaknesses
- CWE-119
- Reviewed
- 2026-06-09
Affected packages
• PyPI pywasm3: <= 0.5.0 (no fix yet)
Description
A vulnerability has been found in wasm3 0.5.0 and classified as problematic. This vulnerability affects the function MarkSlotAllocated of the file source/m3_compile.c. The manipulation leads to out-of-bounds write. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
Related
Alias · CVE (1)
- CVE-2025-6272 A vulnerability has been found in wasm3 0.5.0 and classified as problematic. vulnerability
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2025-6272 advisory
- https://github.com/wasm3/wasm3/issues/531 web
- https://github.com/pypa/advisory-database/tree/main/vulns/pywasm3/PYSEC-2025-186.yaml web
- https://github.com/user-attachments/files/19516600/wasm3_crash.txt web
- https://github.com/wasm3/pywasm3 package
- https://github.com/wasm3/pywasm3/blob/main/wasm3/m3_compile.c#L333 web
- https://vuldb.com/?ctiid.313276 web
- https://vuldb.com/?id.313276 web
- https://vuldb.com/?submit.593008 web