CVE-2026-1990 | oatpp up to 1.3.1 Type.hpp ObjectWrapper null pointer dereference (Issue 1080)

A vulnerability identified as problematic has been detected in oatpp up to 1.3.1. This impacts the function oatpp::data::type::ObjectWrapper::ObjectWrapper of the file src/oatpp/data/type/Type.hpp. The manipulation leads to null pointer dereference.

This vulnerability is uniquely identified as CVE-2026-1990. Local access is required to approach this attack. Moreover, an exploit is present.

The project was informed of the problem early through an issue report but has not responded yet.