Airpig2011 vulnerabilities
Published CVEs affecting Airpig2011 products: 2 record(s), with severity, exploitation and fixes.
CVE-2025-63929
High · 7.5
CWE-476 Nov 12, 2025
NULL Pointer Dereference in Airpig2011 Iec104
A null pointer dereference vulnerability exists in airpig2011 IEC104 thru Commit be6d841 (2019-07-08). When multiple threads enqueue elements concurrently via IEC10X_PrioEnQueue, the function may dereference a null or freed queue pointer, resulting in a segmentation fault and potential denial-of-service.
CVE-2025-63927
Medium · 4.0
CWE-122 Nov 12, 2025
Heap-based Buffer Overflow in Airpig2011 Iec104
A heap-use-after-free vulnerability exists in airpig2011 IEC104 thru Commit be6d841 (2019-07-08). During multi-threaded client execution, the function Iec10x_Scheduled can access memory that has already been freed, potentially causing program crashes or undefined behavior. This may be exploited to trigger a denial-of-service or memory corruption.