CVE-2026-102723

A NULL pointer dereference vulnerability occurs when the MSRP attribute table is exhausted. Table exhaustion leads to dereferencing a NULL pointer, which can crash the application.

May lead to a crash or service outage (denial of service) in systems processing MSRP attributes. An attacker could exploit table exhaustion to cause service unavailability.

Update the software to a version containing the fix and enforce pointer validation before use. Consider limiting the number of processed MSRP attributes.