CVE-2026-2642: ggreer the_silver_searcher search.c search_stream null pointer dereference

Severity: low (CVSS 3.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-02-18 · updated 2026-06-17
Weakness: CWE-404

Description

A security vulnerability has been detected in ggreer the_silver_searcher up to 2.2.0. The impacted element is the function search_stream of the file src/search.c. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Affected products

ggreer the_silver_searcher: 2.0, 2.1, 2.2.0

References

https://github.com/ggreer/the_silver_searcher/
https://github.com/ggreer/the_silver_searcher/issues/1558
https://github.com/oneafter/0119/blob/main/segv1
https://vuldb.com/?ctiid.346398
https://vuldb.com/?id.346398
https://vuldb.com/?submit.752769

Get alerted when CVE-2026-2642 or the next vulnerability affects your stack