CVE-2021-4198CWE-476

messaging_ipc.dll NULL Pointer Dereference in multiple Bitdefender products (VA-10016)

Medium · published March 7, 2022

CVSS v3.1
6.1
EPSS
1%
Percentile
44.9
In the wild
Unconfirmed
What it is

A NULL Pointer Dereference vulnerability in the messaging_ipc.dll component as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools, VPN Standalone allows an attacker to arbitrarily crash product processes and generate crashdump files. This issue affects: Bitdefender Total Security versions prior to 26.0.3.29. Bitdefender Internet Security versions prior to 26.0.3.29. Bitdefender Antivirus Plus versions prior to 26.0.3.29. Bitdefender Endpoint Security Tools versions prior to 7.2.2.92. Bitdefender VPN Standalone versions prior to 25.5.0.48.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00545 · 44.9th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2022-03-07T11:30Z
EPSS history
Timeline
  • 07 MAR 11:30Z
    messaging_ipc.dll NULL Pointer Dereference in multiple Bitdefender products (VA-10016)
    cvelistv5