A vulnerability, which was classified as critical, has been found in wasm3 up to 0.5.0. Impacted is the function
op_SetSlot_i32/op_CallIndirect of the file m3_exec.h. Performing manipulation results in memory corruption.
This vulnerability was named CVE-2025-15413. The attack needs to be approached locally. In addition, an exploit is available.
Unfortunately, the project has no active maintainer at the moment.