Cloudanix VulnDB

CVE-2025-63929

High · 7.5

CVSS

7.5

EPSS

0.4%

Published

Nov 12, 2025

CISA due date

—

The record

A null pointer dereference vulnerability exists in airpig2011 IEC104 thru Commit be6d841 (2019-07-08). When multiple threads enqueue elements concurrently via IEC10X_PrioEnQueue, the function may dereference a null or freed queue pointer, resulting in a segmentation fault and potential denial-of-service.

Affected packages

Ecosystem Package Introduced Fixed