Unrated severityNVD Advisory· Published Nov 21, 2025· Updated Nov 21, 2025
Wazuh NULL pointer dereference in fim_alert line 666
CVE-2025-64169
Description
Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 3.7.0 to before 4.12.0, fim_alert() implementation does not check whether oldsum->md5 is NULL or not before dereferencing it. A compromised agent can cause a crash of analysisd by sending a specially crafted message to the wazuh manager. This issue has been patched in version 4.12.0.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/wazuh/wazuh/security/advisories/GHSA-hc35-h924-8596mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.