HIGH🇬🇧 English

CVE-2025-66585

CVSS 7.3v4.0pub. 2025-12-11upd. 2026-06-04

In AzeoTech DAQFactory release 20.7 (Build 2555), a use after free vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process.

oryginał EN
CVSS Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Azeotech Daqfactory

    APP
    Azeotech
    < 21.1
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Memory
CWE
Referencje

Powiązane podatności

CVE-2025-66590HIGH8.4ten sam produkt

In AzeoTech DAQFactory release 20.7 (Build 2555), an out-of-bounds write vulnerability can be exploited by an ...

CVE-2025-66586HIGH7.3ten sam produkt

In AzeoTech DAQFactory release 20.7 (Build 2555), an access of resource using incompatible type vulnerability ...

CVE-2025-66588HIGH8.4ten sam produkt

In AzeoTech DAQFactory release 20.7 (Build 2555), an access of uninitialized pointer vulnerability can be expl...

CVE-2025-66589HIGH8.4ten sam produkt

In AzeoTech DAQFactory release 20.7 (Build 2555), an Out-of-bounds Read vulnerability can be exploited by an a...

CVE-2021-42543HIGH7.8ten sam produkt

The affected application uses specific functions that could be abused through a crafted project file, which co...