CVE-2022-28966: WASM3 Project WASM3

Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Wasm3 0.5.0 has a heap-based buffer overflow in NewCodePage in m3_code.c (called indirectly from Compile_BranchTable in m3_compile.c).

Affected products

• WASM3 Project WASM3: version 0.5.0 only

Published 2022-04-16. Last modified 2026-06-17.