CVE-2025-63927 | THREATINT

Description

A heap-use-after-free vulnerability exists in airpig2011 IEC104 thru Commit be6d841 (2019-07-08). During multi-threaded client execution, the function Iec10x_Scheduled can access memory that has already been freed, potentially causing program crashes or undefined behavior. This may be exploited to trigger a denial-of-service or memory corruption.

PUBLISHED Reserved 2025-10-27 | Published 2025-11-12 | Updated 2025-11-13 | Assigner mitre

References

github.com/airpig2011/IEC104/issues/20

songsong.host/mybugs/CVE-2025-63927.html

cve.org (CVE-2025-63927)

nvd.nist.gov (CVE-2025-63927)

Download JSON