PT-2026-27320 · Ncmdump · Ncmdump

Titan Team · Publicado 2026-03-24 · Atualizado 2026-05-05 · CVE-2026-4743

Positive Technologies (AI Summary)

CVSS v4.0

5.1

Média

Vetor base

AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:D/RE:L/U:Green

Name of the Vulnerable Software and Affected Versions ncmdump versions prior to 1.4.0

Description A NULL pointer dereference issue exists in taurusxin ncmdump within the src/utils modules, specifically related to the cJSON.Cpp program files. This can lead to unexpected behavior or program crashes.

Recommendations Update ncmdump to version 1.4.0 or later.

Correção

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

CVE-2026-4743

Produtos afetados

Ncmdump

Referências · 4

• https://github.com/taurusxin/ncmdump/pull/52 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2026-4743 · Nota de Segurança
• https://twitter.com/CVEarity/status/2036846961127809261 · Publicação no Twitter
• https://t.me/cveNotify/162261 · Publicação no Telegram