CVE-2025-63929

A null pointer dereference vulnerability exists in airpig2011 IEC104 thru Commit be6d841 (2019-07-08)

High · published November 12, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
29.9
In the wild
Unconfirmed
What it is

⚡ Multiple threads fighting for queue access may lead to a total meltdown! A null pointer dereference vulnerability in airpig2011 can cause a segmentation fault and potentially crash your service. 🔥 Think of it like a busy restaurant kitchen where chefs are trying to grab the same pot at once. If they all reach for it without communication, one might accidentally knock it off the stove, causing chaos and a big mess! An attacker could exploit this vulnerability to cause a denial-of-service, making your application crash and leaving users unable to access services. This could lead to significant downtime and user frustration, impacting business operations.

Put simply

Think of it like a busy restaurant kitchen where chefs are trying to grab the same pot at once. If they all reach for it without communication, one might accidentally knock it off the stove, causing chaos and a big mess! This null pointer dereference vulnerability arises when multiple threads enqueue elements concurrently via the IEC10X_PrioEnQueue function. If a thread attempts to use a null or freed queue pointer, it results in a segmentation fault, causing instability in the application.

What to do

An attacker could exploit this vulnerability to cause a denial-of-service, making your application crash and leaving users unable to access services. This could lead to significant downtime and user frustration, impacting business operations. To remediate this vulnerability, make sure to update airpig2011 to the latest version, which includes a fix. Additionally, implement proper synchronization mechanisms to manage concurrent access to the queue effectively. Regularly review your code for similar threading issues to prevent future vulnerabilities. You've got this! Patch your application and ensure smooth sailing in your service. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00372 · 29.9th percentile
Published
2025-11-12T00:00Z
EPSS history
Timeline
  • 12 NOV 00:00Z
    A null pointer dereference vulnerability exists in airpig2011 IEC104 thru Commit be6d841 (2019-07-08)
    cvelistv5