CVE-2025-45331

The vulnerability exists in the data processing module of brplot v420.69.1, specifically within the br_dagens_handle_once function. This is a classic Null Pointer Dereference (CWE-476) where the function fails to validate pointer initialization or null-check return values before dereferencing memory. When processing input data, if a pointer remains uninitialized or becomes null through error conditions, subsequent memory access operations trigger a segmentation fault. The network attack vector (AV:N) indicates the vulnerable function is accessible via network input handling, likely in data parsing routines. This is a memory safety issue common in C/C++ codebases lacking defensive null-checking.