VYPR
← All advisories
Unrated severityOSV Advisory· Published Dec 28, 2018· Updated Aug 5, 2024

CVE-2018-20532

CVE-2018-20532

Description

There is a NULL pointer dereference at ext/testcase.c (function testcase_read) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

88

Patches

Vulnerability mechanics

Root cause

"A NULL pointer dereference occurs in the testcase_read function when handling specific input."

Attack vector

An attacker can trigger this vulnerability by providing specially crafted input to the libsolv library. This input causes the `testcase_read` function to dereference a NULL pointer, leading to a crash. The vulnerability is present in libsolv through version 0.7.2 [ref_id=1].

Affected code

The vulnerability resides in the `testcase_read` function located in the `ext/testcase.c` file within libsolvext.a [ref_id=1, ref_id=2].

What the fix does

The advisory indicates that an update for libsolv is available to address this issue. The specific fix involves correcting the NULL pointer dereference within the `testcase_read` function. This resolves the denial-of-service condition by ensuring proper handling of potential NULL pointers during input processing [ref_id=1].

Generated on Jun 3, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

5

News mentions

0

No linked articles in our index yet.