CVE-2025-47359CWE-416

Use After Free in Secure Processor

High · published February 2, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
1.0
In the wild
Unconfirmed
What it is

⚡ Memory corruption lurking in the threads! When multiple threads access a memory free API at the same time, things can go awry in a spectacularly messy way. 🔥 Think of it like a busy restaurant kitchen where multiple chefs try to grab the last slice of cake at the same time without coordinating. If they all reach for it, chaos ensues and the cake might just end up splattered everywhere instead of served! An attacker could exploit this vulnerability to cause unpredictable behavior in your application, leading to crashes or even unauthorized data access. This could be an absolute disaster if sensitive data is exposed or if essential services go offline!

Put simply

Think of it like a busy restaurant kitchen where multiple chefs try to grab the last slice of cake at the same time without coordinating. If they all reach for it, chaos ensues and the cake might just end up splattered everywhere instead of served! CVE-2025-47359 is a high-severity memory corruption vulnerability that occurs when multiple threads simultaneously access the memory free API, potentially leading to unexpected behavior or crashes in the application.

What to do

An attacker could exploit this vulnerability to cause unpredictable behavior in your application, leading to crashes or even unauthorized data access. This could be an absolute disaster if sensitive data is exposed or if essential services go offline! To mitigate this, ensure that your code follows proper thread safety practices around memory management. Review your threading model, implement locking mechanisms where necessary, and consider updating to the latest version of your libraries or frameworks that address this issue. You've got this! With a little vigilance and the right updates, you can ensure your application stays secure and running smoothly. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00103 · 1.0th percentile
Weakness
CWE-416 · Use After Free
Published
2026-02-02T15:20Z
EPSS history
Timeline
  • 02 FEB 15:20Z
    Use After Free in Secure Processor
    cvelistv5