TI-2026-65033 Aliases CVE-2026-100895 GHSA-w7f9-3mm4-6cr5

Trusted Domain Project OpenARC libopenarc arc-canon.c arc_parse_canon_t null pointer dereference

HIGH 70CWE-404Published 2026-09-28 · Updated 2026-09-28

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Attack requirements: None
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · Low
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-404.

Summary

A security flaw has been discovered in Trusted Domain Project OpenARC up to 1.0.0.Beta1. Impacted is the function arc_parse_canon_t in the library libopenarc/arc-canon.c of the component libopenarc. The manipulation results in null pointer dereference. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 1.0.0.Beta0 is recommended to address this issue. Upgrading the affected component is advised.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00405 35th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by the CNA

Fix Fixed OpenARC (Trusted Domain Project): 1.0.0.Beta0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: Yes
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Trusted Domain Project	OpenARC	1.0.0.Beta1	1.0.0.Beta0	Patch available	CNA

OpenARC VendorTrusted Domain Project Affected 1.0.0.Beta1 Fixed in 1.0.0.Beta0 Patch available CNA

CPE names CNA · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:trusted_domain_project:openarc::::::::	—	—	Trusted Domain Project

cpe:2.3:a:trusted_domain_project:openarc:*:*:*:*:*:*:*:* Versions — — ·Trusted Domain Project

Remediation

Fix · CNA OpenARC (Trusted Domain Project) Fixed in 1.0.0.Beta0

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product

Red Hat

Timeline

2026-10-02 Threatist record created from CVE-2026-100895
2026-10-03 Alias added: GHSA-w7f9-3mm4-6cr5
2026-10-25 EPSS moved to the below the 50th percentile

References

Exploit 1

https://weitongli.com/share/openarc-c-tag-null-deref.html

Patch 1

https://github.com/trusteddomainproject/OpenARC/releases/tag/v1.0.0.Beta0

TI-2026-65175 Trusted Domain Project OpenDMARC SPF Macro opendmarc_spf.c opendmarc_sp2_find_mailfrom_domain improper authentication CVSS 4.0MEDIUM 6.9
TI-2026-65174 Trusted Domain Project OpenDMARC Multi-Record Set opendmarc_policy_query_dmarc authentication spoofing CVSS 4.0MEDIUM 6.9
TI-2026-65173 Trusted Domain Project OpenDMARC opendmarc_policy.c integer overflow CVSS 4.0MEDIUM 6.9
TI-2026-65171 Trusted Domain Project OpenDKIM Tag Tokenizer dkim.c dkim_process_set less trusted source CVSS 4.0MEDIUM 6.9
TI-2026-65064 Trusted Domain Project OpenDMARC opendmarc_policy.c strcasecmp exceptional condition CVSS 4.0MEDIUM 6.9
TI-2026-65063 Trusted Domain Project OpenDMARC opendmarc_policy.c opendmarc_policy_parse_dmarc exceptional condition CVSS 4.0MEDIUM 6.9

See all 13 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences