PT-2026-27320 · Ncmdump · Ncmdump

Titan Team · CVE-2026-4743 · Published 2026-03-24 · Updated 2026-05-05

Positive Technologies (AI Summary)

CVSS v4.0

5.1

Medium

Base vector

AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/S:N/AU:N/R:U/V:D/RE:L/U:Green

Name of the Vulnerable Software and Affected Versions ncmdump versions prior to 1.4.0

Description A NULL pointer dereference issue exists in taurusxin ncmdump within the src/utils modules, specifically related to the cJSON.Cpp program files. This can lead to unexpected behavior or program crashes.

Recommendations Update ncmdump to version 1.4.0 or later.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2026-4743

Affected Products

Ncmdump

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/4xxx/CVE-2026-4743.json · Exploit
• https://github.com/taurusxin/ncmdump/pull/52 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-4743 · Security Note
• https://osv.dev/vulnerability/CVE-2026-4743 · Vendor Advisory
• https://github.com/taurusxin/ncmdump · Note
• https://twitter.com/CVEarity/status/2036846961127809261 · Twitter Post
• https://t.me/cveNotify/162261 · Telegram Post