CVE-2025-63927

A heap-use-after-free vulnerability exists in airpig2011 IEC104 thru Commit be6d841 (2019-07-08). During multi-threaded client execution, the function Iec10x_Scheduled can access memory that has already been freed, potentially causing program crashes or undefined behavior. This may be exploited to trigger a denial-of-service or memory corruption.

• CWE-122

• https://github.com/airpig2011/IEC104/issues/20Exploit
• https://songsong.host/mybugs/CVE-2025-63927.htmlExploit, Third Party Advisory

Published

Nov 12, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-63913An issue was discovered in OpenSBI 1.3 allowing attackers to…7.5
• CVE-2025-63914An issue was discovered in Cinnamon kotaemon 0.11.0. The _ma…6.5
• CVE-2025-63916MyScreenTools v2.2.1.0 contains a critical OS command inject…8.1
• CVE-2025-63917PDFPatcher thru 1.1.3.4663 executable's XML bookmark import …7.1
• CVE-2025-63918PDFPatcher executable does not validate user-supplied file p…6.2
• CVE-2025-6392Brocade SANnav before Brocade SANnav 2.4.0a could log databa…4.4
• CVE-2025-63929A null pointer dereference vulnerability exists in airpig201…7.5
• CVE-2025-6393A vulnerability was found in TOTOLINK A702R, A3002R, A3002RU…7.5
• CVE-2025-63932D-Link Router DIR-868L A1 FW106KRb01.bin has an unauthentica…7.3
• CVE-2025-63938Tinyproxy through 1.11.2 contains an integer overflow vulner…6.5
• CVE-2025-63939Improper input handling in /Grocery/search_products_itname.p…9.8
• CVE-2025-6394A vulnerability was found in code-projects Simple Online Hot…9.8