UBUNTU-CVE-2026-89511

In the Linux kernel, the following vulnerability has been resolved: qede: Fix NULL pointer dereference in TPA fragment processing Under memory pressure, the qede driver encounters NULL pointer dereferences when processing TPA continuation fragments. Commit 8a8633978b84 "qede: Add buildskb support...

UBUNTU-CVE-2026-79590

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...

CVE-2026-33970

A NULL Pointer Dereference in the NR RRC and L2 components of Samsung's 5G baseband can be triggered by a malformed RRC Reconfiguration message. This affects a wide range of Exynos mobile processors, wearable processors, and modems (850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500,...

EUVD-2026-77164

An issue was discovered in camera in Samsung Mobile Processor Exynos 1580 and 2500. An untrusted pointer dereference occurs when a malformed message is sent to the camera driver, causing limited information disclosure or denial of service...

PT-2026-90996

A vulnerability has been found in GPAC up to f1219cde. The impacted element is an unknown function of the file scenegraph/vrml tools.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The exploit has been...

UBUNTU-CVE-2026-89749

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix crash passing ERRPTR to kthreadstop eventteststuff calls kthreadrun and unconditionally passes the returned taskstruct pointer to kthreadstop. kthreadrun returns an error pointer such as ERRPTR-ENOMEM when kthread...

CVE-2019-19203

CVE-2019-19203 在Oniguruma 6.x（6.9.4rc2之前版本）中发现了一个问题。在文件gb18030.c的函数gb18030mbcenclen中，在解引用UChar指针时未检查是否已越过匹配字符串的末尾，这导致了基于堆的缓冲区过度读取。 研究人员：ManhND（Tarantula团队，VinCSS，Vingroup成员） 什么是Oniguruma Oniguruma由K...

CVE-2026-15891

The MQTT-SN client keepalive handler processping in subsys/net/lib/mqttsn/mqttsn.c removes the gateway record after PINGREQ retries are exhausted. It invoked SYSSLISTPEEKHEADCONTAINER&client-gateways, gw, next but discarded the result. That macro is a pure expression that does not assign to gw, s...

POC-CVE-2024-12227

CVE-2024-12227 - NTIOLibX64.sys DoS PoC CVE-2024-12227の概念実証 - MSI Dragon CenterのNTIOLibX64.sysドライバにおけるヌルポインタ参照の脆弱性。 説明 NTIOLibX64.sysバージョン3.0.0.10には、ReadPhysicalMemory関数（IOCTL...

EUVD-2026-77132

The MQTT-SN client keepalive handler processping in subsys/net/lib/mqttsn/mqttsn.c removes the gateway record after PINGREQ retries are exhausted. It invoked SYSSLISTPEEKHEADCONTAINER&client-gateways, gw, next but discarded the result. That macro is a pure expression that does not assign to gw, s...

CVE-2026-15891

CVE-2026-15891 is a NULL pointer dereference in the Zephyr RTOS MQTT-SN client. The keepalive handler process_ping() in subsys/net/lib/mqtt_sn/mqtt_sn.c discards the return value of SYS_SLIST_PEEK_HEAD_CONTAINER, leaving the gw pointer as NULL. The code then dereferences gw->gw_id and passes i...

CVE-2026-15891 NULL pointer dereference in Zephyr MQTT-SN client when removing a non-responsive gateway

The MQTT-SN client keepalive handler processping in subsys/net/lib/mqttsn/mqttsn.c removes the gateway record after PINGREQ retries are exhausted. It invoked SYSSLISTPEEKHEADCONTAINER&client-gateways, gw, next but discarded the result. That macro is a pure expression that does not assign to gw, s...

CVE-2021-24086-exp

CVE-2021-24086 これは CVE-2021-24086（"Windows TCP/IP サービス拒否の脆弱性 "）の概念実証コードです。この脆弱性は、2021年2月にMicrosoftが修正した tcpip.sys のNULLポインタ参照です。このツイートによると、この脆弱性は @piazzt によって発見されました。IPv6上で悪意のあるUDPパケットを送信することで、リモートからトリガーできます。 Microsoftのブログはこちらで読めます: TCP/IP に影響する複数のセキュリティ更新:...

CVE-2019-10207

CVE-2019-10207 PoC para CVE-2019-10207 kernel de linux: bluetooth: hciuart: desreferencia de puntero NULL del kernel root@kitploit: gcc CVE-2019-10207.c -o cve-2019-10207-poc -static probado en 4.20.0 la compilación del kernel debe tener abiertos los CONFIG: root@kitploit: CONFIGBTHCIUARTMRVL=y...

BUGS_OOM_NULL_PTR_DEREF

BUGSOOMNULLPTRDEREF Android 上的空指针解引用（NULL PTR DEREF）漏洞，OOM 只是为了好玩...

CVE-2026-90576

A security vulnerability has been detected in GPAC up to f1219cde. Affected is the function gfnodelistaddchild of the file scenegraph/basescenegraph.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The explo...

CVE-2025-68325

CVE-2025-68325 schcake doesn't consider the case when cakeenqueue returns a non-null result, leading to the imbalanced qlen in the qdisc tree, triggering null-deref in its parent sched, e.g., qfq. Affected Versions Fixed at v6.19-rc1 Severity Low Patch root@kitploit: In cakedrop,...

CVE-2026-90573

A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gfsgmfurldel of the file scenegraph/vrmltools.c of the component MP4Box. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit is publicly...

EUVD-2026-77061

A security vulnerability has been detected in GPAC up to f1219cde. Affected is the function gfnodelistaddchild of the file scenegraph/basescenegraph.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The explo...

CVE-2026-90576

GPAC (up to commit f1219cde) contains a null pointer dereference in the function gf_node_list_add_child within scenegraph/base_scenegraph.c of the MP4Box component. A local attacker with low privileges can trigger a denial-of-service condition with no impact on confidentiality or integrity (CVSS ...