CVE-2025-65411: Null Pointer Dereference
A NULL pointer dereference in the src/path.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Service (DoS) via injecting a crafted payload into the searchpath parameter.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/unrtfto a version that resolves this vulnerability.Fixed in 0.21.13-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2025-65411?
CVE-2025-65411 has a high severity due to its potential to cause a Denial of Service (DoS).
How do I fix CVE-2025-65411?
To fix CVE-2025-65411, update to the latest version of GNU Unrtf that addresses the NULL pointer dereference vulnerability.
What component is affected in CVE-2025-65411?
CVE-2025-65411 affects the src/path.c component of GNU Unrtf v0.21.10.
What attack vector is exploited in CVE-2025-65411?
CVE-2025-65411 can be exploited by injecting a crafted payload into the search_path parameter.
What is the impact of exploiting CVE-2025-65411?
Exploiting CVE-2025-65411 can lead to a Denial of Service, disrupting the availability of the application.