CVE-2025-10824CWE-119CWE-416

CVE-2025-10824

Medium · published September 23, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
3.8
In the wild
Unconfirmed
What it is

A vulnerability was determined in axboe fio up to 3.41. This impacts the function __parse_jobs_ini of the file init.c. Executing manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00149 · 3.8th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-416 · Use After Free
Published
2025-09-23T05:15Z
References (5)
https://github.com/axboe/fio/issues/1981 · [email protected]https://github.com/user-attachments/files/22266756/poc.zip · [email protected]https://vuldb.com/?ctiid.325181 · [email protected]https://vuldb.com/?id.325181 · [email protected]https://vuldb.com/?submit.654072 · [email protected]
EPSS history
Timeline
  • 23 SEP 00:02Z
    axboe fio init.c __parse_jobs_ini use after free
    cvelistv5