PT-2025-26479 · Poco+1 · Poco+1
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Poco versions up to 1.14.1
Description:
A null pointer dereference issue was found in the
MultipartInputStream function of the file Net/src/MultipartReader.cpp. This issue can be exploited locally. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited. The issue is related to the MultipartInputStream function, which is part of the Poco library.Recommendations:
For Poco versions up to 1.14.1, upgrade to version 1.14.2 to address this issue. As a temporary workaround, consider restricting the use of the
MultipartInputStream function until the patch is applied.Exploit
Correção
Improper Resource Release
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Debian
Poco