AZL-108399
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-108399.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-108399
- Upstream
- Published
- 2026-10-14T16:17:42Z
- Modified
- 2026-10-19T05:35:54Z
- Summary
- CVE-2026-110659 affecting package mstflint 4.28.0-1
- Details
-
ELFIO through 3.12 contains a NULL pointer dereference vulnerability in relocation_section_accessor get_entry() that allows attackers to crash applications via an unvalidated sh_link index. Attackers can supply a crafted ELF file whose SHT_REL or SHT_RELA section has a dangling sh_link, causing find_hash_section() to dereference null and deny service.
- References