CVE-2025-63929

Description

A null pointer dereference vulnerability exists in airpig2011 IEC104 thru Commit be6d841 (2019-07-08). When multiple threads enqueue elements concurrently via IEC10X_PrioEnQueue, the function may dereference a null or freed queue pointer, resulting in a segmentation fault and potential denial-of-service.

PUBLISHED Reserved 2025-10-27 | Published 2025-11-12 | Updated 2025-11-13 | Assigner mitre

References

github.com/airpig2011/IEC104/issues/21

songsong.host/mybugs/CVE-2025-63929.html

cve.org (CVE-2025-63929)

nvd.nist.gov (CVE-2025-63929)

Download JSON