brplot Null Pointer Dereference Vulnerability

A null pointer dereference vulnerability has been identified in brplot version 420.69.1, specifically within the br_dagens_handle_once function of the data processing module. This vulnerability can lead to unpredictable program behavior, causing segmentation faults and program crashes. The issue arises when the function br_data_get1 returns a null value, which is then improperly dereferenced, leading to a crash.

Impact

Exploitation of this vulnerability causes segmentation faults and program crashes.

Reproduction

To reproduce this vulnerability, use brplot version 420.69.1 and invoke the br_dagens_handle_once function with a br_datas_t object that contains a group_id not present in the data. The function will attempt to retrieve data using br_data_get1. When a null value is returned, the function will dereference the null pointer, leading to a crash.

Remediation

Users can update to the latest version of brplot, where this vulnerability has been fixed.