Vulnerabilidades de Azeotech
CVEs publicadas que afetam produtos de Azeotech: 7 registro(s), com severidade, exploração e correções.
CVE-2026-12921
Alta · 7.8
CWE-416 25/06/2026
Use after free in AzeoTech DAQFactory
In AzeoTech DAQFactory versions 21.1 and prior, a Use After Free vulnerability can be exploited by an attacker using specially crafted .ctl files which can result in code execution.
CVE-2026-12390
Alta · 7.8
CWE-843 18/06/2026
Access of resource using incompatible type ('type confusion') in AzeoTech DAQFactory
In AzeoTech DAQFactory versions 21.1 and prior, a Type Confusion vulnerability can be exploited by an attacker using specially crafted .ctl files which can result in code execution.
CVE-2025-66590
Crítica · 9.8
CWE-787 11/12/2025
Out-of-bounds Write vulnerability in AzeoTech DAQFactory
In AzeoTech DAQFactory release 20.7 (Build 2555), an out-of-bounds write vulnerability can be exploited by an attacker to cause the program to write data past the end of an allocated memory buffer. This can lead to arbitrary code execution or a system crash.
CVE-2025-66589
Crítica · 9.1
CWE-125 11/12/2025
Out-of-bounds Read vulnerability in AzeoTech DAQFactory
In AzeoTech DAQFactory release 20.7 (Build 2555), an Out-of-bounds Read vulnerability can be exploited by an attacker to cause the program to read data past the end of an allocated buffer. This could allow an attacker to disclose information or cause a system crash.
CVE-2025-66588
Crítica · 9.8
CWE-824 11/12/2025
Access of Uninitialized Pointer vulnerability in AzeoTech DAQFactory
In AzeoTech DAQFactory release 20.7 (Build 2555), an access of uninitialized pointer vulnerability can be exploited by an attacker which can lead to arbitrary code execution.
CVE-2025-66586
Alta · 7.8
CWE-843 11/12/2025
Type Confusion vulnerability in AzeoTech DAQFactory
In AzeoTech DAQFactory release 20.7 (Build 2555), an access of resource using incompatible type vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process.
CVE-2025-66585
Alta · 7.8
CWE-416 11/12/2025
Use After Free vulnerability in AzeoTech DAQFactory
In AzeoTech DAQFactory release 20.7 (Build 2555), a use after free vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process.