WRITEUP
WRITEUP
Exploit for CVE-2025-15468
- Openssl < 3.3.6 - NULL Pointer Dereference
AI Analysis
This patch addresses CVE-2025-15468 by adding a NULL guard in the `ossl_quic_get_cipher_by_char()` function to prevent dereferencing a NULL `SSL_CIPHER` pointer. The vulnerability likely leads to a crash or undefined behavior due to missing validation.
Attack Type
DoS
Complexity
trivial
Reliability
reliable
MITRE ATT&CK
Click anywhere or press Esc to close