CVE-2021-28855

Description

In Deark before 1.5.8, a specially crafted input file can cause a NULL pointer dereference in the dbuf_write function (src/deark-dbuf.c).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://fatihhcelik.github.io/posts/NULL-Pointer-Dereference-Deark/ ↗
• https://github.com/jsummers/deark/commit/287f5ac31dfdc074669182f51ece637706070eeb ↗
• https://github.com/fuzzing2026/CVE-PoCs/tree/main/deark-CVE-2021-28855 ↗