Beveiligingsadvies

CVE-2025-27701

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-05-27 15:42:11
Laatst bijgewerkt 2025-09-04 05:15:46
Toegewezen door Google_Devices
CVSS-score 5.5
Status PUBLISHED

Beschrijving

In the function process_crypto_cmd, the values of ptrs[i] can be potentially equal to NULL which is valid value after calling slice_map_array(). Later this values will be derefenced without prior NULL check, which can lead to local Temporary DoS or OOB Read, leading to information disclosure.