← voltar
CVE-2025-10824

axboe fio init.c __parse_jobs_ini use after free

CVSS 4.8 MEDIUMEPSS 0.1%CWE-119CWE-416
Vexday Risk Score
13Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 4.8EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
23 set 2025Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
A vulnerability was determined in axboe fio up to 3.41. This impacts the function __parse_jobs_ini of the file init.c. Executing manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
axboe · fio

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://github.com/axboe/fio/issues/1981https://github.com/user-attachments/files/22266756/poc.ziphttps://vuldb.com/?ctiid.325181https://vuldb.com/?id.325181https://vuldb.com/?submit.654072