CVE-2026-88357

CVE-2026-88357

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

nDPI 5.1.0 contains a memory access issue in the DNS dissector and serializer deserialization code. Specially crafted network input can cause byte-buffer addresses at odd offsets to be cast to uint16_t or wider integer pointers and directly dereferenced without alignment checks. This results in undefined behavior and can cause process termination in UBSan-instrumented builds or on strict-alignment architectures, leading to denial of service.

CVSS 7.5 · Élevée · EPSS 0,6%

Publication

2026-09-24T00:00:00.000Z

Mise à jour

2026-09-24T17:53:09.601Z

Pile logicielle: system

Vérifiez votre serveur →