The ccoap library contains a null pointer dereference in the coap_server_handle_session() function. When the server processes a URI_PATH option whose data pointer is NULL, it directly calls strncmp() without checking for NULL. This causes a segmentation fault, crashing the server process. The failure mode is a denial of service; no code execution or data disclosure is indicated.

This issue occurs in the ccoap CoAP server as found in the 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 revision. The CVE does not list specific vendor or product versions, so any deployment of this ccoap code that includes the offending revision is affected.

The vulnerability can be triggered remotely by sending a crafted CoAP request that includes a URI_PATH option with a NULL data pointer. Although the exploit leads only to a crash, it can be repeated to cause persistent denial of service. EPSS data is not available and the vulnerability is not listed in CISA's KEV catalog, indicating a limited but still real risk to exposed servers.