Vulnerabilities > CVE-2021-4198 - NULL Pointer Dereference vulnerability in Bitdefender products

CVSS 6.1 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

HIGH

local

low complexity

bitdefender

CWE-476

NVD

Published: 2022-03-07

Updated: 2024-11-21

Summary

A NULL Pointer Dereference vulnerability in the messaging_ipc.dll component as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools, VPN Standalone allows an attacker to arbitrarily crash product processes and generate crashdump files. This issue affects: Bitdefender Total Security versions prior to 26.0.3.29. Bitdefender Internet Security versions prior to 26.0.3.29. Bitdefender Antivirus Plus versions prior to 26.0.3.29. Bitdefender Endpoint Security Tools versions prior to 7.2.2.92. Bitdefender VPN Standalone versions prior to 25.5.0.48.

Vulnerable Configurations

Part	Description	Count
Application	Bitdefender Bitdefender VPN Standalone * Bitdefender Total Security - Bitdefender Total Security 7.2.1.65 Bitdefender Total Security 12.0 Bitdefender Total Security 21.0.24.62 Bitdefender Total Security 23.0.24.120 Bitdefender Total Security 24.0.26.136 Bitdefender Total Security 25.0.7.29 Bitdefender Internet Security - Bitdefender Internet Security 12.0 Bitdefender Internet Security 23.0.24.120 Bitdefender Internet Security 24.0.26.136 Bitdefender Internet Security 25.0.7.29 Bitdefender Antivirus Plus - Bitdefender Antivirus Plus 12.0 Bitdefender Antivirus Plus 23.0.24.120 Bitdefender Antivirus Plus 24.0.26.136 Bitdefender Antivirus Plus 25.0.7.29 Bitdefender Endpoint Security Tools - Bitdefender Endpoint Security Tools 6.2.21.18 Bitdefender Endpoint Security Tools 6.2.21.155 Bitdefender Endpoint Security Tools 6.2.21.171 Bitdefender Endpoint Security Tools 6.6.8.115 Bitdefender Endpoint Security Tools 6.6.11.163 Bitdefender Endpoint Security Tools 6.6.12.170 Bitdefender Endpoint Security Tools 6.6.18.261 Bitdefender Endpoint Security Tools 6.6.23.320 Bitdefender Endpoint Security Tools 7.2.1.65	29

Common Weakness Enumeration (CWE)

CWE-476 - NULL Pointer Dereference

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References