ThreatCluster

CVE-2024-45028 and CVE-2025-37841 Address NULL Dereference Issues

First seen 21 Feb 2026, 03:20 UTC Api.Msrc.Microsoft 41

Article Content

Browse articles
ThreatCluster

CVE-2024-45028, published on September 11, 2024, addresses a NULL dereference issue in mmc_test during allocation failures. CVE-2025-37841, published on May 9, 2025, resolves a similar NULL dereference vulnerability in cpupower's bench component related to malloc failures. Both vulnerabilities could impact system stability and security.

Timeline

2024-09-11
CVE-2024-45028 published
2025-05-09
CVE-2025-37841 published
2026-02-18
Article on CVE-2025-37841 published
2026-02-21
Article on CVE-2024-45028 published