Vulnerabilities > CVE-2021-28855 - NULL Pointer Dereference vulnerability in Entropymine Deark

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
entropymine
CWE-476

Summary

In Deark before 1.5.8, a specially crafted input file can cause a NULL pointer dereference in the dbuf_write function (src/deark-dbuf.c).

Common Weakness Enumeration (CWE)