PT-2025-46689 · Unknown · Airpig2011 Iec104

Published 2025-11-12 · Updated 2025-11-13 · CVE-2025-63927

Positive Technologies (AI Summary)

CVSS v3.1

4.0

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions airpig2011 IEC104 versions through Commit be6d841 (2019-07-08)

Description A heap-use-after-free issue exists in the software. During multi-threaded client execution, the Iec10x Scheduled function can access already freed memory, potentially leading to program crashes or undefined behavior. This could be exploited to cause a denial-of-service or memory corruption.

Recommendations Update to a version later than Commit be6d841 (2019-07-08).

Exploit

Fix

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

CVE-2025-63927

Affected Products

Airpig2011 Iec104

References · 5

• 🔥 https://github.com/airpig2011/IEC104/issues/20 · Exploit
• 🔥 https://songsong.host/mybugs/CVE-2025-63927.html · Exploit
• https://osv.dev/vulnerability/CVE-2025-63927 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-63927 · Security Note
• https://twitter.com/CVEnew/status/1988820470033224085 · Twitter Post