PT-2026-27320 · Ncmdump · Ncmdump

Titan Team · Published 2026-03-24 · Updated 2026-05-05 · CVE-2026-4743

Positive Technologies (AI Summary)

CVSS v4.0

5.1

Medium

Base vector

AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:D/RE:L/U:Green

Name of the Vulnerable Software and Affected Versions ncmdump versions prior to 1.4.0

Description A NULL pointer dereference issue exists in taurusxin ncmdump within the src/utils modules, specifically related to the cJSON.Cpp program files. This can lead to unexpected behavior or program crashes.

Recommendations Update ncmdump to version 1.4.0 or later.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2026-4743

Affected Products

Ncmdump

References · 4

• https://github.com/taurusxin/ncmdump/pull/52 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-4743 · Security Note
• https://twitter.com/CVEarity/status/2036846961127809261 · Twitter Post
• https://t.me/cveNotify/162261 · Telegram Post