RSEC-2023-4
NULL pointer dereference vulnerability
Published Oct 4, 2023 · updated May 19, 2025
The igraph R package, through version 0.7.1, is susceptible to a vulnerability identified in the igraph_i_strdiff function within igraph_trie.c. This vulnerability can lead to a NULL pointer dereference, potentially exploited by attackers to cause a denial of service, resulting in an application crash. Users of the igraph package should take necessary precautions and consider updating to a patched version to mitigate this security risk.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Oct 4, 2023 · OSV.dev
Detected
The igraph R package, through version 0.7.1, is susceptible to a vulnerability identified in the igraph_i_strdiff function within igraph_trie.c. This vulnerability can lead to a NULL pointer dereference, potentially exploited by attackers to cause a denial of service, resulting in an application crash. Users of the igraph package should take necessary precautions and consider updating to a patched
May 19, 2025 · OSV.dev
Fix available
igraph fixed in 1.2.2-2
May 19, 2025 · OSV.dev
Fix available
igraph fixed in 1.2.2-2
May 19, 2025 · OSV.dev
Updated
The igraph R package, through version 0.7.1, is susceptible to a vulnerability identified in the igraph_i_strdiff function within igraph_trie.c. This vulnerability can lead to a NULL pointer dereference, potentially exploited by attackers to cause a denial of service, resulting in an application crash. Users of the igraph package should take necessary precautions and consider updating to a patched
Affected
- CRAN igraph0.7.1 → 1.2.2-2