CVE-2026-19411
LowCVSS 3.9Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
A NULL pointer vulnerability has been found in the shim application of the dp.c library. The missing NULL check could allow attackers to perform a denial of service attack on a system using the shim application for UEFI bootloader.
Risk Assessment
The attack could lead to system unavailability, potentially disrupting critical services. The vulnerability may be exploited locally by someone with system access.
Recommendation
It is recommended to update the dp.c library and the shim application to a version that fixes the missing NULL pointer check.
Original NVD description (English source)
A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader.