CVE-2025-63929: AIRPIG2011 IEC104

High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days.

A null pointer dereference vulnerability exists in airpig2011 IEC104 thru Commit be6d841 (2019-07-08). When multiple threads enqueue elements concurrently via IEC10X_PrioEnQueue, the function may dereference a null or freed queue pointer, resulting in a segmentation fault and potential denial-of-service.

Affected products

• AIRPIG2011 IEC104: up to and including 2019-07-08

Published 2025-11-12. Last modified 2026-06-17.