CVE-2025-45332

Published: Jun 25, 2025Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

vkoskiv c-ray 1.1 contains a Null Pointer Dereference (NPD) vulnerability in the parse_mtllib function of its data processing module, leading to unpredictable program behavior, causing segmentation faults, and program crashes.

Affected (1)

Products: Vkoskiv: C Ray

Vkoskiv

1 product

C Ray

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Vkoskiv C Ray	Version 1.1

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (2)

https://gist.github.com/QiuYitai/6ebfa07510828a9464ba7fb948255ed5

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/vkoskiv/c-ray/issues/119

Source: cve@mitre.org

ExploitPatch

Timeline

No history available yet.