CVE-2025-68955CWE-362

Multi-thread race condition vulnerability in the card framework module

High · published January 14, 2026

CVSS v3.1
8.0
EPSS
0%
Percentile
1.2
In the wild
Unconfirmed
What it is

⚡ This multi-thread race condition is like a racecar driver speeding for the finish without checking the track ahead! Imagine multiple delivery trucks trying to access the same loading dock at once; if they don’t coordinate, they could block each other and cause a chaotic backup. That's exactly what happens here—threads competing to access resources can lead to unintended downtime. If exploited, this race condition could cause your application to become unavailable when it's needed most—it's like a store running out of stock just as a big sale starts. This could lead to frustrated users and potential loss of revenue, so it's crucial to address this issue swiftly!

Put simply

Imagine multiple delivery trucks trying to access the same loading dock at once; if they don’t coordinate, they could block each other and cause a chaotic backup. That's exactly what happens here—threads competing to access resources can lead to unintended downtime. This vulnerability arises from a lack of synchronization between threads in the card framework module, allowing them to interfere with each other and potentially disrupt service availability. When multiple threads compete for the same resource, it can lead to inconsistent application states.

What to do

If exploited, this race condition could cause your application to become unavailable when it's needed most—it's like a store running out of stock just as a big sale starts. This could lead to frustrated users and potential loss of revenue, so it's crucial to address this issue swiftly! To mitigate this, ensure you update the card framework module to the latest patch that resolves the race condition. Review your code for proper thread management and implement synchronization mechanisms to prevent future occurrences. You've got this! Take these steps and you'll keep your system running smoothly! 🛡️

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00109 · 1.2th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2026-01-14T01:51Z
EPSS history
Timeline
  • 14 JAN 01:51Z
    Multi-thread race condition vulnerability in the card framework module
    cvelistv5