CVE-2025-66589CWE-125

CVE-2025-66589

Critical · published December 12, 2025

CVSS v3.1
9.1
EPSS
0%
Percentile
28.0
In the wild
Unconfirmed
What it is

⚡ AzeoTech DAQFactory is leaking information like a sieve! An Out-of-bounds Read vulnerability in release 20.7 (Build 2555) could let an attacker peek past the edges of allocated memory — and see things they shouldn't. 🔍 Think of it like a bookstore where the shelves are way too short for the books. If someone reaches too far, they might grab a book from the next shelf, getting into areas they weren't meant to access. This vulnerability could lead to the disclosure of sensitive information or, even worse, crash the system entirely, disrupting operations. An attacker could exploit the program's weakness, potentially leading to a domino effect of mischief. The consequences could be absolutely devastating!

Put simply

Think of it like a bookstore where the shelves are way too short for the books. If someone reaches too far, they might grab a book from the next shelf, getting into areas they weren't meant to access. The Out-of-bounds Read vulnerability allows an attacker to read data beyond the allocated buffer in DAQFactory, which could expose sensitive internal data or crash the application altogether.

What to do

This vulnerability could lead to the disclosure of sensitive information or, even worse, crash the system entirely, disrupting operations. An attacker could exploit the program's weakness, potentially leading to a domino effect of mischief. The consequences could be absolutely devastating! Update to the latest version of AzeoTech DAQFactory to patch this vulnerability. Regularly audit your memory handling practices to mitigate out-of-bounds errors in the future. Don't wait—secure your systems now! You've got this! By taking these steps, you'll be one step closer to securing your applications. 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00354 · 28.0th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2025-12-12T02:15Z
Affected products (1)
ProductVersionsFixed in
azeotech/daqfactory< 21.121.1
References (1)
EPSS history
Timeline
  • 11 DEC 20:48Z
    Out-of-bounds Read vulnerability in AzeoTech DAQFactory
    cvelistv5