CVE-2025-13844

published 2026-01-15

CVE-2025-13844: CWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user imports a malicious project file (SSD file) shared by the…

high 8.4 CVSS 4.0

AV L AC L AT N PR N UI A VC H VI H VA H SC L SI L SA L E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

CWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user imports a malicious project file (SSD file) shared by the attacker into Rapsody.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
schneider-electric	ecostruxure_power_build_rapsody	<= 2.8.1	—
schneider-electric	ecostruxure_power_build_rapsody	<= 2.8.3	—
schneider-electric	ecostruxure_power_build_rapsody	<= 2.8.5	—
schneider-electric	ecostruxure_power_build_rapsody	<= 2.8.6	—
schneider-electric	ecostruxure_power_build_rapsody	<= 2.8.8	—
schneider_electric	ecostruxure_power_build_rapsody	—	—
schneider_electric	ecostruxure_power_build_rapsody	—	—
schneider_electric	ecostruxure_power_build_rapsody	—	—
schneider_electric	ecostruxure_power_build_rapsody	—	—
schneider_electric	ecostruxure_power_build_rapsody	—	—

CWE-415