CVE-2025-12207

CVE-2025-12207 describes a null pointer dereference vulnerability in Kamailio 5.5's Grammar Rule Handler (src/core/cfg.y:yyerror_at), affecting the Kamailio product. Rated Medium with a CVSS score of 5.5, this local attack requires manipulating configuration files, leading to a denial of service. While the exploit has been publicly disclosed, its actual existence is questioned, and there is no evidence of active exploitation or readily available exploit tools like Metasploit or Nuclei. Community discussion and media coverage are minimal, with some questioning the realism of the attack scenario.