Memory Reference Vulnerability in Wazuh by Wazuh Inc.

CVE-2025-62788

What is CVE-2025-62788?

Wazuh, an open-source threat prevention and detection platform, is affected by a memory reference issue in versions prior to 4.11.0. This vulnerability arises from the improper handling of memory following its allocation and subsequent deallocation in the w_copy_event_for_log() function. An attacker could exploit this flaw by sending a specially crafted message to the Wazuh manager, which may allow them to compromise the application's integrity. This risk stems from the potential corruption of valid data due to the use of previously freed memory, making it essential for users to upgrade to version 4.11.0 or later to mitigate this issue.

References