CVE-2026-30656 | fio 3.41 Job File Parser str_fdp_pli_cb null pointer dereference (Issue 2055)

VDB-357940 · CVE-2026-30656 · ISSUE 2055 FIO 3.41 JOB FILE PARSER STR_FDP_PLI_CB NULL POINTER DEREFERENCE HISTORYDIFFRELATEJSONXMLCTI CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 3.4 $0-$5k 2.36+ Summaryinfo A vulnerability, which was classified as problematic, was found in fio 3.41. Affected by this vulnerability is the function str_fdp_pli_cb of the component Job File Parser. Executing a manipulation can lead to null pointer dereference. This vulnerability is registered as CVE-2026-30656. No exploit is available. Detailsinfo A vulnerability classified as problematic was found in fio 3.41. This vulnerability affects the function str_fdp_pli_cb of the component Job File Parser. The manipulation with an unknown input leads to a null pointer dereference vulnerability. The CWE definition for the vulnerability is CWE-476. A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit. As an impact it is known to affect availability. CVE summarizes: A NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing job files containing the fdp_pli option. The callback function str_fdp_pli_cb() does not validate the input pointer and calls strdup() on a NULL value when the option is specified without an argument. This results in a segmentation fault and process crash. The advisory is shared for download at github.com. This vulnerability was named CVE-2026-30656 since 03/04/2026. There are known technical details, but no exploit is available. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product. Productinfo Name fio Version 3.41 CPE 2.3info 🔒 CPE 2.2info 🔒 CVSSv4info VulDB Vector: 🔒 VulDB Reliability: 🔍 CVSSv3info VulDB Meta Base Score: 3.5 VulDB Meta Temp Score: 3.4 VulDB Base Score: 3.5 VulDB Temp Score: 3.4 VulDB Vector: 🔒 VulDB Reliability: 🔍 CVSSv2info Vector Complexity Authentication Confidentiality Integrity Availability Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock VulDB Base Score: 🔒 VulDB Temp Score: 🔒 VulDB Reliability: 🔍 Exploitinginfo Class: Null pointer dereference CWE: CWE-476 / CWE-404 CAPEC: 🔒 ATT&CK: 🔒 Physical: No Local: No Remote: Partially Availability: 🔒 Status: Not defined Price Prediction: 🔍 Current Price Estimation: 🔒 0-Day Unlock Unlock Unlock Unlock Today Unlock Unlock Unlock Unlock Threat Intelligenceinfo Interest: 🔍 Active Actors: 🔍 Active APT Groups: 🔍 Countermeasuresinfo Recommended: no mitigation known Status: 🔍 0-Day Time: 🔒 Timelineinfo 03/04/2026 CVE reserved 04/16/2026 +42 days Advisory disclosed 04/16/2026 +0 days VulDB entry created 04/16/2026 +0 days VulDB entry last update Sourcesinfo Advisory: 2055 Status: Not defined CVE: CVE-2026-30656 (🔒) GCVE (CVE): GCVE-0-2026-30656 GCVE (VulDB): GCVE-100-357940 Entryinfo Created: 04/16/2026 18:27 Changes: 04/16/2026 18:27 (54) Complete: 🔍 Cache ID: 99:1E2:101 Discussion No comments yet. Languages: en. Please log in to comment. ◂ PreviousOverviewNext ▸