Skip to main content

NULL Pointer Dereference

CVE-2025-15504

Low
1.9/10

Summary

A security flaw has been discovered in lief-project LIEF through 0.17.1. Affected by this issue is the function "Parser::parse_binary" of the file "src/ELF/Parser.tcc" of the component ELF Binary Parser. The manipulation results in a NULL Pointer Dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. Upgrading to version 0.17.2 can resolve this issue. It is recommended to upgrade the affected component.

  • LOW
  • LOCAL
  • NONE
  • UNCHANGED
  • NONE
  • LOW
  • NONE
  • HIGH

CWE-476 - NULL Pointer Dereference

A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

References

Advisory Timeline

  • Published