CVE WatchAug 11, 2026

CVE-2026-58101

Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference. X509V3_EXT_d2i(ext) returns NULL

CVSS

7.5

High

EPSS

0.3%

p23

KEV

—

Exploit Today

0-100

Published: Jul 13, 2026 · Last modified: Aug 11, 2026 · CWE-476

EPSS · 30d

0.2%EPSS · 30 days0.3%

2026-08-132026-09-10

Technical description

Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference. X509V3_EXT_d2i(ext) returns NULL when an extension's DER value fails to parse. basicC, ia5string, and auth_att dereference its result without a NULL check. keyid_data also dereferences akid->keyid, which is NULL for an empty AKI SEQUENCE (DER 30 00) even when the parse succeeds. A caller invoking an affected helper on an extension from an untrusted certificate triggers a SIGSEGV that crashes the Perl process.

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-781307.5 HIG

—

——0strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser.16h CVE-2026-781265.9 MED

—

——0strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin.16h CVE-2026-457477.5 HIG

—

——0Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.16, the Lua TLS certificate information helper could dereference NULL certificate fields when a Lua script requested certificate information for TLS traffic where some certificate fields were absent. Crafted TLS traffic processed by a deployment using affected Lua TLS scripting could crash Suricata, resulting in denial of service. Version 7.0.16 contains a fix. As a workaround, avoid Lua scripts that call TLS certificate information helpers on untrusted traffic (`TlsGetCertInfo` function), or update scripts to handle missing certificate fields where possible.23h CVE-2026-865476.2 MED

2.9%

——1mrubyc through 4.0.0 contains a null pointer dereference vulnerability in the op_enter() handler in src/vm.c when processing untrusted bytecode. Attackers can craft malicious .mrb bytecode files with OP_ENTER instructions at the top level to crash the embedding application and cause denial of service.22h CVE-2026-663036.5 MED

54.1%

——16Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network.3d CVE-2026-779018.8 HIG

46.5%

——14Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.3d