A vulnerability classified as problematic has been found in p11-kit. Impacted is the function C_DeriveKey of the file rpc-message.c:. Performing a manipulation results in null pointer dereference.

This vulnerability is cataloged as CVE-2026-2100. It is possible to initiate the attack remotely. There is no exploit available.