PT-2025-44322 · Wazuh · Wazuh

Published 2025-01-23 · Updated 2025-10-29 · CVE-2025-62788

Positive Technologies · (AI Summary)

CVSS v3.1

7.5

High

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Wazuh versions prior to 4.11.0

Description Wazuh is a platform for threat prevention, detection, and response. A flaw exists in the w copy event for log() function where it references memory after it has been freed, initially allocated in OS CleanMSG(). A compromised agent could potentially compromise the application's integrity by sending a specially crafted message to the Wazuh manager. An attacker can leverage this issue to potentially corrupt valid data by using previously freed memory if the memory area has been allocated and used elsewhere.

Recommendations Update to version 4.11.0 or later.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2025-14486

CVE-2025-62788

GHSA-QJCW-FJVH-8Q4G

Affected Products

Wazuh

References · 9

• https://github.com/wazuh/wazuh/security/advisories/GHSA-qjcw-fjvh-8q4g · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14486 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-62788 · Security Note
• https://osv.dev/vulnerability/CVE-2025-62788 · Vendor Advisory
• https://dbugs.ptsecurity.com/vulnerability/PT-2025-44322 · Note
• https://twitter.com/CVEnew/status/1983577230631440572 · Twitter Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-62788 · Note
• https://twitter.com/VulmonFeeds/status/1983681499086942556 · Twitter Post
• https://t.me/CVEtracker/36087 · Telegram Post