CVE-2025-15535: nicbarker clay库Clay__MeasureTextCached函数空指针解引用漏洞

// CVE-2025-15535 PoC - Null Pointer Dereference in Clay__MeasureTextCached // This PoC demonstrates triggering the null pointer dereference #include <stdio.h> #include <stdlib.h> #include "clay.h" // Mock implementation for demonstration void Clay__MeasureTextCached(char* text, int length) { // Vulnerable code path - missing null check char* cache_entry = NULL; // This triggers the vulnerability if (cache_entry->data == '\0') { // NULL pointer dereference printf("Vulnerability triggered!\n"); } } int main() { printf("CVE-2025-15535 PoC\n"); printf("Affected: nicbarker clay <= 0.14\n"); printf("Vulnerability: Null pointer dereference in Clay__MeasureTextCached\n"); // Trigger the vulnerable function Clay__MeasureTextCached("malicious input", 16); return 0; } // Note: Actual exploit requires specific conditions based on clay library internals // Reference: https://github.com/nicbarker/clay/issues/566