Elfio
Monthly
A NULL pointer dereference in ELFIO through 3.12 allows a crafted ELF object file to crash any application that parses it, yielding availability-only denial of service without memory corruption, code execution, or data exposure. The defect lives in relocation_section_accessor::get_entry(), which trusts the sh_link index of a SHT_REL or SHT_RELA section; when that index dangles, find_hash_section() returns null and the subsequent dereference aborts the process. Publicly available exploit code exists, and although the CVSS 4.0 vector is PR:N (no privileges required) it is AV:L with UI:P, so the practical scenario is local tooling or an ingestion pipeline that opens attacker-supplied binaries rather than a remotely reachable service; there is no evidence of confirmed active exploitation in the wild.
A NULL pointer dereference in ELFIO through 3.12 allows a crafted ELF object file to crash any application that parses it, yielding availability-only denial of service without memory corruption, code execution, or data exposure. The defect lives in relocation_section_accessor::get_entry(), which trusts the sh_link index of a SHT_REL or SHT_RELA section; when that index dangles, find_hash_section() returns null and the subsequent dereference aborts the process. Publicly available exploit code exists, and although the CVSS 4.0 vector is PR:N (no privileges required) it is AV:L with UI:P, so the practical scenario is local tooling or an ingestion pipeline that opens attacker-supplied binaries rather than a remotely reachable service; there is no evidence of confirmed active exploitation in the wild.