Medium severity4.0NVD Advisory· Published Nov 12, 2025· Updated Jun 17, 2026
CVE-2025-63927
CVE-2025-63927
Description
A heap-use-after-free vulnerability exists in airpig2011 IEC104 thru Commit be6d841 (2019-07-08). During multi-threaded client execution, the function Iec10x_Scheduled can access memory that has already been freed, potentially causing program crashes or undefined behavior. This may be exploited to trigger a denial-of-service or memory corruption.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<=be6d841+ 2 more
- (no CPE)range: <=be6d841
- (no CPE)
- cpe:2.3:a:airpig2011:iec104:*:*:*:*:*:*:*:*range: <=2019-07-08
Patches
Vulnerability mechanics
References
2- github.com/airpig2011/IEC104/issues/20nvdExploit
- songsong.host/mybugs/CVE-2025-63927.htmlnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.