This vulnerability involves a NULL pointer dereference in the ASR Lapwing_Linux software's ims_client modules, particularly in the sip/utils/src/sipuri.c source file. The flaw allows pointer manipulation that can cause the program to crash or behave unexpectedly. The CVSS 3.1 score of 7.4 reflects a high-severity issue exploitable remotely with low complexity and privileges. No vendor advisory or patch information is currently available, and the product is not a cloud service.

The impact includes potential denial of service due to NULL pointer dereference and pointer manipulation, which can disrupt the affected system's availability and integrity. Confidentiality impact is rated low, integrity and availability impacts are also low to medium. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround has been published, users should monitor vendor communications for updates. Until a patch is available, restricting network access to the vulnerable component and applying standard security controls may reduce exposure but are not guaranteed mitigations.