PT-2026-31038

🗓️ 07 Apr 2026 00:00:00Reported by Positive TechnologiesType

Null pointer dereference in CMS EnvelopedData processing of KeyAgreeRecipientInfo can crash and cause denial of service.

Reporter	Title	Published	Views	Family All 534
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities	18 Aug 202609:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Agent images	27 Jul 202612:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in the Containerized Version of IBM Guardium Key Lifecycle Manager	24 Jul 202614:11	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities identified in Containerized version of IBM Guardium Key Lifecycle Manager	12 Oct 202606:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues	24 Aug 202622:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ for HPE NonStop is affected by vulnerabilities in OpenSSL	1 Jul 202622:00	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerable Version of Software in Use	6 Jul 202622:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities	14 Oct 202607:49	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities exists in IBM Netezza Software	30 Sep 202615:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i is Affected By NULL Pointer Dereference, Use Afer Free, and Out-of-Bounds Write Vulnerabilities in OpenSSL [CVE-2026-28388, CVE-2026-28389, CVE-2026-28390, CVE-2026-28387, CVE-2026-31789]	8 Jun 202620:07	–	ibm

Source	Link
openeuler	www.openeuler.org/zh/security/security-bulletins/detail/
suse	www.suse.com/support/update/announcement/2026/suse-su-20261291-1
suse	www.suse.com/security/cve/CVE-2026-31790
osv	www.osv.dev/vulnerability/OESA-2026-2189
suse	www.suse.com/support/update/announcement/2026/suse-su-20262396-1
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-28389
twitter	www.twitter.com/LambdaWatchdog/status/2044023124128108803
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.15
bugzilla	www.bugzilla.suse.com/1266357
cve	www.cve.org/CVERecord

29 Sep 2026 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 27.8

CVSS 3.17.5 - 9.8

EPSS0.0103

SSVC