Medium severity5.3NVD Advisory· Published Sep 28, 2026

CVE-2026-100895

Description

A security flaw has been discovered in Trusted Domain Project OpenARC up to 1.0.0.Beta1. Impacted is the function arc_parse_canon_t in the library libopenarc/arc-canon.c of the component libopenarc. The manipulation results in null pointer dereference. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 1.0.0.Beta0 is recommended to address this issue. Upgrading the affected component is advised.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Trusted Domain Project/OpenARCllm-create
Range: <=1.0.0.Beta1

Patches

Vulnerability mechanics

References

github.com/trusteddomainproject/OpenARC/releases/tag/v1.0.0.Beta0nvd
vuldb.com/cve/CVE-2026-100895nvd
vuldb.com/submit/917187nvd
vuldb.com/vuln/410845nvd
vuldb.com/vuln/410845/ctinvd
weitongli.com/share/openarc-c-tag-null-deref.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000