Memory Access Issue in nDPI 5.1.0 by ntop

CVE-2026-88357

What is CVE-2026-88357?

nDPI 5.1.0 contains a vulnerability stemming from a memory access issue within the DNS dissector and the serializer deserialization process. When specially crafted network inputs are presented, they can manipulate byte-buffer addresses at odd offsets, leading to casting into uint16_t or wider integer pointers. This problematic process allows for direct dereferencing without appropriate alignment checks, which results in undefined behavior. The vulnerability can trigger process terminations in UBSan-instrumented environments or systems with strict alignment architectures, ultimately creating conditions that lead to denial of service.

References