CVE-2025-63927

n/a / n/a PUBLISHED

Description (CNA)

A heap-use-after-free vulnerability exists in airpig2011 IEC104 thru Commit be6d841 (2019-07-08). During multi-threaded client execution, the function Iec10x_Scheduled can access memory that has already been freed, potentially causing program crashes or undefined behavior. This may be exploited to trigger a denial-of-service or memory corruption.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/airpig2011/IEC104/issues/20
https://songsong.host/mybugs/CVE-2025-63927.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.