CVE-2026-88357

Name of the Vulnerable Software and Affected Versions nDPI version 5.1.0

Description A memory access issue exists in the DNS dissector and serializer deserialization code. Specially crafted network input can cause byte-buffer addresses at odd offsets to be cast to uint16 t or wider integer pointers and directly dereferenced without alignment checks. This leads to undefined behavior and can cause process termination on strict-alignment architectures or in UBSan-instrumented builds, resulting in a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.