PT-2022-12391 · Ropium · Ropium

Aidai · Published 2022-01-14 · Updated 2022-01-21 · CVE-2021-45761

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ROPium version 3.1

Description The issue is related to an invalid memory address dereference via the find() function.

Recommendations For ROPium version 3.1, consider disabling the find() function until a patch is available.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2021-45761

Affected Products

Ropium

References · 3

• 🔥 https://github.com/Boyan-MILANOV/ropium/issues/32 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-45761 · Security Note
• https://osv.dev/vulnerability/CVE-2021-45761 · Vendor Advisory