A vulnerability, which was classified as critical, has been found in wasm3 up to 0.5.0. Impacted is the function op_SetSlot_i32/op_CallIndirect of the file m3_exec.h. Performing manipulation results in memory corruption.

This vulnerability was named CVE-2025-15413. The attack needs to be approached locally. In addition, an exploit is available.

Unfortunately, the project has no active maintainer at the moment.