CVE-2019-18635

EUVD-2019-8358
An issue was discovered in Mooltipass Moolticute through v0.42.1 and v0.42.x-testing through v0.42.5-testing. There is a NULL pointer dereference in MPDevice_win.cpp.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 56%
Affected Products (NVD)
VendorProductVersion
themooltipassmoolticute
𝑥
< 0.42.1
themooltipassmoolticute
0.42.2:testing
themooltipassmoolticute
0.42.3:testing
themooltipassmoolticute
0.42.4:testing
themooltipassmoolticute
0.42.5:testing
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/mooltipass/moolticute/pull/483
https://securiteam.io/2019/10/27/a-null-pointer-dereference/
https://github.com/mooltipass/moolticute/pull/483
https://securiteam.io/2019/10/27/a-null-pointer-dereference/