PatchSiren

Belledonne Communications CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Belledonne Communications CVE published 2025-01-14

CVE-2025-0430

A NULL pointer dereference vulnerability in Belledonne Communications Linphone-Desktop 5.2.6 allows remote, unauthenticated attackers to trigger a denial-of-service condition. The vulnerability was disclosed by CISA on January 14, 2025, with a CVSS 3.1 score of 7.5 (HIGH). The attack vector is network-based, requires no privileges or user interaction, and results in complete loss of availability. Belledon [truncated]