A NULL pointer dereference vulnerability exists in GNU libmicrohttpd version 1.0.2 and earlier. This flaw can be triggered by a specially crafted packet, causing the affected software to crash and resulting in a denial-of-service (DoS) condition. The issue was fixed in a commit after the v1.0.2 release.