VYPR

nDPI

by Utoni

CVEs (1)

  • CVE-2026-88357HigSep 24, 2026
    risk 0.42cvss 7.5epss —

    nDPI 5.1.0 contains a memory access issue in the DNS dissector and serializer deserialization code. Specially crafted network input can cause byte-buffer addresses at odd offsets to be cast to uint16_t or wider integer pointers and directly dereferenced without alignment checks.…