CVE-2021-46240

What it actually does

A NULL pointer dereference in gf_dump_vrml_sffield at scene_manager/scene_dump.c crashes the process when handling malformed scene data.

Why it matters to the business

Causes service outages and application downtime for systems processing untrusted multimedia or scene files; low observed exploitation reduces urgency but still requires patching.

How an attack unfolds

An attacker supplies a specially crafted VRML or scene file that reaches gf_dump_vrml_sffield, dereferencing a NULL pointer and terminating the process.

How to fix it

Upgrade glpi-project/glpi to commit 213e6a5d33274cded09f50f395655951ae783b8a or later; rebuild and redeploy the patched binary.

How to confirm the fix worked

Confirm the commit hash is present in the running codebase; re-test with the original crashing input to verify the process no longer terminates.

Typical attack path

1. Locate an instance accepting untrusted scene or multimedia files
2. Craft a minimal input that triggers the NULL dereference path
3. Deliver the file through the application's normal import or parsing interface
4. Observe process termination and service unavailability

How to detect it

Review application and system logs for segmentation faults or abrupt process exits during scene or VRML parsing operations.

What your security team should do

• Apply the referenced commit within standard change windows
• Add crash-monitoring alerts for the affected component
• Scan dependency graphs for other copies of the vulnerable scene-dump code