Skip to main content

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

Vulnerability IntelligenceCVE-2025-15572

CVE-2025-15572

MEDIUM4.8

wasm3 NewCodePage memory leak

Published Feb 10, 2026

Modified 3 weeks ago

Details

A vulnerability has been found in wasm3 up to 0.5.0. The affected element is the function NewCodePage. The manipulation leads to memory leak. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. Unfortunately, the project has no active maintainer at the moment.

References

https://github.com/oneafter/cve-proofs/blob/main/POC-20251203-07/repro

https://github.com/wasm3/wasm3/

https://github.com/wasm3/wasm3/issues/550

https://vuldb.com/?ctiid.344934

https://vuldb.com/?id.344934

https://vuldb.com/?submit.752765

https://www.cve.org/CVERecord?id=CVE-2025-15572

CVSS Analysis

CVSS v4.0

4.8

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Attack Requirements

NoneAT:N

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Vulnerable System

Vuln. Confidentiality

NoneVC:N

Vuln. Integrity

NoneVI:N

Vuln. Availability

LowVA:L

Subsequent System

Subseq. Confidentiality

NoneSC:N

Subseq. Integrity

NoneSI:N

Subseq. Availability

NoneSA:N

4.8/CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

Weakness Type (CWE)

Resource Management

Improper Resource Shutdown

Ecosystems

Timeline

PublishedFeb 10, 2026

ModifiedFeb 23, 2026

CVE-2025-15572 | Mondoo Vulnerability Intelligence