地图 / Null Dereference in X509ToObject

Null Dereference in X509ToObject

内存破坏 / 空指针解引用 / #3824331

厂商: Node.js
严重程度: 低危 · CVSS 5.9
赏金: —
弱点: 空指针解引用
研究员: @hahahkim
披露日期: 2026-10-23
资产: https://github.com/nodejs/node
CVE: —

该报告还没有中文解读。

时间线

2026-06-25报告提交
2026-10-23公开披露

阅读 HackerOne 原文 ↗作者 @hahahkim · 版权归作者与 Node.js 所有

同类报告

Null Pointer Dereference by Crafted Response from AI ModelBrave Software · 2025-03-26 Null pointer dereference in SMTP server function smtp_string_parseOpen-Xchange · — · $1,500 NULL pointer dereference in node:sqlite DatabaseSync#applyChangeset() via malformed SQLite changesetNode.js · 2026-05-23 wallet-rpc crash via malformed /gettransactions response (empty txs → vector::front() in check_tx_key / check_tx_proof)Monero · 2026-08-05 Crash in mrb_ary_pushshopify-scripts · 2019-09-04 · $800 important: Apache HTTP Server: Crash resulting in Denial of Service in mod_proxy via a malicious request (CVE-2024-38477)Internet Bug Bounty · 2024-07-13 · $4,920