Belledonne Communications Linphone-Desktop NULL Pointer Dereference Vulnerability Leading to Denial-of-Service

A NULL pointer dereference vulnerability has been identified in Belledonne Communications Linphone-Desktop version 5.2.6. This vulnerability allows remote attackers to cause a denial-of-service condition on affected devices.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition on the affected device.

Remediation

Users are advised to update to version 5.3.99 of the linphone-sdk. CISA recommends minimizing network exposure for control system devices, using firewalls to isolate control system networks from business networks, and employing secure remote access methods such as VPNs.