CVE-2025-45333

Berkeley ABC (A System for Sequential Synthesis and Verification) is a widely-used open-source framework for logic synthesis, technology mapping, and formal verification. The Abc_NtkCecFraigPart function is part of the combinational equivalence checking (CEC) and FRAIG (Functionally Reduced And-Inverter Graph) modules. CWE-476 (Null Pointer Dereference) occurs when the code attempts to dereference a pointer that has not been properly validated as non-null before use. In this case, the vulnerability exists in the data processing module's handling of network topology structures, likely when processing circuit graphs with specific structural characteristics that leave intermediate pointers uninitialized. The affected CPE would be: cpe:2.3:a:berkeley-abc:abc:1.1:*:*:*:*:*:*:*. This library is commonly integrated into EDA (Electronic Design Automation) tools, formal verification platforms, and circuit optimization workflows.