Vulnerability in Wazuh Analysisd Crashes Service Due to Improper NULL Check

CVE-2025-62785

What is CVE-2025-62785?

The vulnerability affects the Wazuh platform, a widely used open-source tool for threat prevention, detection, and response. In the fillData() function, a failure to properly validate input can lead to a crash of the analysisd component when it processes a maliciously crafted agent message. This oversight allows an attacker with access to send such messages, potentially disrupting service and making the analysisd unavailable. The issue has been addressed in version 4.10.2, which ensures that the input is thoroughly validated before processing.

References