CVE-2025-0430
Published: 17 January 2025
Description
Belledonne Communications Linphone-Desktop is vulnerable to a NULL Dereference vulnerability, which could allow a remote attacker to create a denial-of-service condition.
Security Summary
CVE-2025-0430, published on 2025-01-17, is a NULL Dereference vulnerability (CWE-476) in Belledonne Communications Linphone-Desktop. This flaw could allow a remote attacker to create a denial-of-service condition, with a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), indicating high severity due to its network accessibility, low attack complexity, and significant availability impact.
A remote attacker requires no privileges or user interaction to exploit this vulnerability over the network with low complexity. Successful exploitation results in a denial-of-service condition, potentially crashing the affected Linphone-Desktop application and disrupting service availability without impacting confidentiality or integrity.
Mitigation details are provided in the CISA ICS Advisory ICSA-25-014-04, available at https://www.cisa.gov/news-events/ics-advisories/icsa-25-014-04.
Details
- CWE(s)