CVE-2024-36620

MEDIUM

moby <26.0.2 - Null Pointer Dereference

Title source: llm

moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go.

Core 3

Core References

Third Party Advisory

Product

Patch

CVSS v3 6.5

EPSS 0.0010

EPSS Percentile 27.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

CWE

CWE-476

Status published

Products (2)

moby/moby 25.0.0 - 26.1.0Go

mobyproject/moby 25.0.0 - 26.0.2

Published Nov 29, 2024

Tracked Since Feb 18, 2026