This vulnerability in dhcpcd 10.3.0 arises from improper handling of configuration options in the parse_option() function located in src/if-options.c at line 1886. When an invalid or unexpected option token is encountered, the code attempts to access a member of a NULL pointer of type 'struct dhcp_opt', causing a NULL pointer dereference. This results in a runtime error detected by fuzzing instrumentation and leads to an abort of the process. The CVSS v3.1 base score is 6.3, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability.

Successful exploitation causes the dhcpcd process to abort due to a NULL pointer dereference, potentially leading to denial of service. The vulnerability impacts confidentiality, integrity, and availability to a limited extent as indicated by the CVSS vector. There is no indication of remote code execution or privilege escalation. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround is currently documented. Users should monitor vendor communications for updates and consider restricting access to vulnerable dhcpcd instances to trusted networks until a patch is available.