CVE-2026-127125

P-Net versions prior to 1.0.4 are vulnerable to a NULL pointer dereference during the handling of fragmented responses in an RPC session. The issue occurs because the software fails to verify the existence of an Application Relationship before processing a resent response fragment. Specifically, ...

libreswan security update

An update is available for libreswan. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the...

RLSA-2026:98088 Important: libreswan security update

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network VPN...

CVE-2026-128239

GPAC versions through 26.07.0 are vulnerable to a NULL pointer dereference within the MPEG-4 Form spatial-constraint handlers located in src/compositor/mpeg4_form.c. This flaw occurs due to unchecked group lookups when processing a crafted XMT scene where Form constraints reference a non-existent...

EUVD-2026-125053

GPAC through 26.07.0 contains a NULL pointer dereference vulnerability in the MPEG-4 Form spatial-constraint handlers in src/compositor/mpeg4form.c that lets attackers crash the process via unchecked group lookups. Attackers can supply a crafted XMT scene whose Form constraints reference a...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

practice-22-23

Project To run: ./script.sh GitHub repository - https://github.com/LaCinquette/practice-22-23 Progress 1. For vulnerability research I chose the FFmpeg project. I found a commit that met the requirements, namely: Matched the type CWE-476 - null pointer dereference 2. Created a Dockerfile in which...

wasm2c-tableflip

wasm2c sandbox escape: guest module runs a shell command on the host Read the blog: trustsig.eu/blog wasmrtallocatefuncreftable in wasm2c/wasm-rt-impl-tableops.inc sets table-size from the module's declared element count and then ignores the result of calloc. When the allocation fails the table i...

tpwn

tpwn cve-2015-???? poc os x 10.10.5 kernel local privilege escalation vulnerability got burned in 10.11 full writeup etason shout out @ unthreadedjb 4 hax Install NULLGuard to protect yourself against tpwn and other NULL Pointer Deference bugs...

CVE-2026-16659

MCUboot's serial-recovery image-upload handler bsupload in boot/bootserial/src/bootserial.c declares const struct flasharea fap = NULL and assigns it only via flashareaopen part-way through the function. Two early validation failures goto outinvaliddata — a CBOR map that fails to decode, or an...

CVE-2026-63686

ACW3 — CVE-2026-63686 Apache modxml2enc DoS Target environment and demo material for INF2005 ACW3: a NULL pointer dereference in modxml2enc Apache HTTP Server ≤ 2.4.68, fixed in 2.4.69 triggered by a proxied response whose charset conversion partially succeeds, then fails. CVSS 7.5 High — denial ...

CVE-2026-16659

The MCUboot bootloader contains a pre-authentication NULL pointer dereference within the bs_upload() handler in boot/boot_serial/src/boot_serial.c. The vulnerability occurs because the fap pointer is initialized to NULL and only assigned via flash_area_open(). Specific validation failures (malfor...

EUVD-2026-124789

MCUboot's serial-recovery image-upload handler bsupload in boot/bootserial/src/bootserial.c declares const struct flasharea fap = NULL and assigns it only via flashareaopen part-way through the function. Two early validation failures goto outinvaliddata — a CBOR map that fails to decode, or an...

CVE-2026-16659 Pre-authentication NULL pointer dereference in MCUboot serial-recovery image upload (encrypted-image builds)

MCUboot's serial-recovery image-upload handler bsupload in boot/bootserial/src/bootserial.c declares const struct flasharea fap = NULL and assigns it only via flashareaopen part-way through the function. Two early validation failures goto outinvaliddata — a CBOR map that fails to decode, or an...

CVE-2026-16659 Pre-authentication NULL pointer dereference in MCUboot serial-recovery image upload (encrypted-image builds)

MCUboot's serial-recovery image-upload handler bsupload in boot/bootserial/src/bootserial.c declares const struct flasharea fap = NULL and assigns it only via flashareaopen part-way through the function. Two early validation failures goto outinvaliddata — a CBOR map that fails to decode, or an...

PT-2026-146111

MCUboot's serial-recovery image-upload handler bs upload in boot/boot serial/src/boot serial.c declares const struct flash area fap = NULL and assigns it only via flash area open part-way through the function. Two early validation failures goto out invalid data — a CBOR map that fails to decode, ...

cve-2026-86547-mrubyc-op-enter

CVE-2026-86547 — mrubyc OPENTER NULL Pointer Dereference Standalone proof of concept for CVE-2026-86547 , a NULL pointer dereference in mrubyc's openter handler through release 4.0.0. Summary mrubyc is a lightweight Ruby implementation for embedded systems. Its bytecode VM keeps the current...

d-os-descriptor

d-os-descriptor Summary The USB Gadget Subsystem includes security issues in the OS descriptor handling section of compositesetup function composite.c. Processing of properly crafted control transfer request messages result in device crash due to null pointer dereference or memory corruption...

krb5: Unauthenticated KDC NULL pointer dereference KDC DoS via crafted PKINIT pre-auth request

If a KDC is configured to allow PKINIT authentication, an unauthenticated attacker can trigger a null pointer dereference, causing the process to terminate...

krb5: MIT krb5 kadmind authenticated DoS exploiting dereference of null policy name pointers

The policy RPC stubs in kadmin/server/serverstubs.c in MIT Kerberos 5 aka krb5 1.5.3 and later do not reject a NULL policy name decoded by xdrnullstring, which allows remote authenticated users to cause a denial of service kadmind crash via NULL pointer dereference by sending a policy request wit...