CVE-2025-66585 is a use after free vulnerability (CWE-416) in AzeoTech DAQFactory 20.7 (Build 2555). The flaw occurs during the parsing of specially crafted .ctl files, which can cause memory corruption. This memory corruption may enable an attacker to execute arbitrary code in the context of the current process. The vulnerability has a CVSS 4.0 base score of 7.3, indicating high severity, with attack vector local, high attack complexity, no privileges required, and user interaction required. No patches or vendor advisories specifying remediation are currently available.

Successful exploitation can result in arbitrary code execution within the context of the DAQFactory process, potentially compromising system integrity and confidentiality. The vulnerability requires local access and user interaction, and has high attack complexity, which may limit exploitation scenarios. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid opening untrusted or specially crafted .ctl files with DAQFactory 20.7 (Build 2555). Monitor vendor channels for updates regarding patches or mitigations.