CVE-2026-19411: Shim/dp.c library: null-pointer dereference in is_removable_media_path() when devicepathtostr() returns null

Overview

Severity

Low (CVSS 3.9)

CVSS Vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L

Exploit Status

Not Exploited

Patch Tuesday

2026-Aug

Released

2026-08-14

EPSS Score

0.10% (percentile: 0.9%)

Affected Products (2)

Other

• 21275-17084
• 21277-17084

Revision History

• 2026-08-14: Information published.