{"id":"CVE-2026-42801","aliases":["EUVD-2026-85171","GHSA-h9m5-vm2j-qx22"],"status":"published","title":"Deference after null check in as_rrc","description":"NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux (as_rrc module) allows Pointer Manipulation.\n\nThis vulnerability is associated with program file 3g.mod/lib/src/urrsir.c.","severity":{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00284,"percentile":0.21023,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-476"],"published":"2026-09-23T09:03:56Z","modified":"2026-09-23T17:58:00Z","products":[{"vendor":"asr","product":"crane，falcon"}],"references":[{"url":"https://www.asrmicro.com/en/goods/psirt?cid=45"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42801"},{"url":"https://github.com/advisories/GHSA-h9m5-vm2j-qx22"}],"sources":{"cve":[{"id":"CVE-2026-42801","title":"Deference after null check in as_rrc","description":"NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux (as_rrc module) allows Pointer Manipulation.\n\nThis vulnerability is associated with program file 3g.mod/lib/src/urrsir.c.","status":"published","published":"2026-09-23T09:03:56.69Z","modified":"2026-09-23T15:25:17.517Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","level":"high","assessor":"cna"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T13:40:35.004553Z"}],"euvd":[{"id":"EUVD-2026-85171","description":"NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux (as_rrc module) allows Pointer Manipulation.\n\nThis vulnerability is associated with program file 3g.mod/lib/src/urrsir.c.","status":"published","published":"2026-09-23T09:03:56Z","modified":"2026-09-23T15:25:17Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T17:28:00.617613Z"}],"ghsa":[{"id":"GHSA-h9m5-vm2j-qx22","title":"NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux (as_rrc module) allows...","description":"NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux (as_rrc module) allows Pointer Manipulation.\n\nThis vulnerability is associated with program file 3g.mod/lib/src/urrsir.c.","status":"published","published":"2026-09-23T09:30:31Z","modified":"2026-09-23T09:30:31Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","level":"high"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T15:12:19.869437Z"}],"nvd":[{"id":"CVE-2026-42801","description":"NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux (as_rrc module) allows Pointer Manipulation.\n\nThis vulnerability is associated with program file 3g.mod/lib/src/urrsir.c.","status":"published","published":"2026-09-23T09:17:08.727Z","modified":"2026-09-23T17:58:00.627Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","level":"high","assessor":"secondary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:12:50.703874Z"}]}}