PT-2026-114099 · Serge1 · Elfio
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
ELFIO through 3.12 contains a NULL pointer dereference vulnerability in relocation section accessor get entry() that allows attackers to crash applications via an unvalidated sh link index. Attackers can supply a crafted ELF file whose SHT REL or SHT RELA section has a dangling sh link, causing find hash section() to dereference null and deny service.
Exploit
Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Elfio