CVE-2025-59938: Heap buffer overflow in wazuh-analysisd
Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions starting from 3.8.0 to before 4.11.0, wazuh-analysisd is vulnerable to a heap buffer overflow when parsing XML elements from Windows EventChannel messages. This issue has been patched in version 4.11.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
wazuh-analysisdto a version that resolves this vulnerability.Fixed in 4.11.0
Event History
Frequently Asked Questions
What is the severity of CVE-2025-59938?
CVE-2025-59938 is classified as a high-severity vulnerability due to the potential for a heap buffer overflow.
How do I fix CVE-2025-59938?
To mitigate CVE-2025-59938, upgrade Wazuh to version 4.11.0 or later.
What software is affected by CVE-2025-59938?
CVE-2025-59938 affects Wazuh versions from 3.8.0 to before 4.11.0, specifically the wazuh-analysisd component.
What type of vulnerability is CVE-2025-59938?
CVE-2025-59938 is a heap buffer overflow vulnerability that occurs during XML element parsing from Windows EventChannel messages.
When was CVE-2025-59938 disclosed?
The specific disclosure date for CVE-2025-59938 is not provided in the information given.