PT-2026-3086 · Rhapsody · Rhapsody

CVE-2025-13844 · Publicado 2026-01-13 · Atualizado 2026-03-03

Positive Technologies (AI Summary)

CVSS v4.0

8.4

Alta

Vetor base

AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

Name of the Vulnerable Software and Affected Versions Rapsody (affected versions not specified)

Description A double free issue exists that can lead to heap memory corruption. This occurs when a user imports a malicious project file (SSD file) provided by an attacker. The issue involves freeing the same memory location twice, potentially allowing an attacker to control program execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Double Free

Enumeração de Fraquezas

CWE-415

Identificadores relacionados

BDU:2026-04460

CVE-2025-13844

Produtos afetados

Rhapsody

Referências · 6

• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-013-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-013-04.pdf · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2011926072687022179 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-13844 · Nota de Segurança
• https://bdu.fstec.ru/vul/2026-04460 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-13844 · Aviso do Fabricante
• https://t.me/cveNotify/153982 · Publicação no Telegram