A security flaw has been discovered in Trusted Domain Project OpenARC up to 1.0.0.Beta1. Impacted is the function arc_parse_canon_t in the library libopenarc/arc-canon.c of the component libopenarc. The manipulation results in null pointer dereference.
The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 1.0.0.Beta0 is recommended to address this issue.
Upgrading the affected component is advised.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Attack Requirements
None
No additional conditions
Privileges Required
None
No privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
None
No data leak
Integrity
None
No data modification
Availability
Low
Partial disruption
CVSS Vector v4.0
Weakness Type (CWE)
Vulnerable Products
trusted domain project:openarc
References 6
https://vuldb.com/vuln/410845
VDB-410845 | Trusted Domain Project OpenARC libopenarc arc-canon.c arc_parse_canon_t null pointer dereference
https://vuldb.com/vuln/410845/cti
VDB-410845 | CTI Indicators (IOB, IOC, IOA)
https://vuldb.com/cve/CVE-2026-100895
CVE-2026-100895 | CVE Analysis and Report
https://vuldb.com/submit/917187
Submit #917187 | The Trusted Domain Project OpenARC 1.0.0 NULL Pointer Dereference
https://weitongli.com/share/openarc-c-tag-null-deref.html
NVD
https://github.com/trusteddomainproject/OpenARC/releases/tag/v1.0.0.Beta0
NVD