CVE-2026-88384

OpenEXR 3.4.14 contains a NULL Pointer Dereference in the C++ attribute parsing path. A specially crafted EXR file containing an unknown-type attribute with dataSize set to zero causes the parser to create an opaque attribute with a NULL packeddata pointer. The OpaqueAttribute constructor passes...

EUVD-2026-86273

OpenEXR 3.4.14 contains a NULL Pointer Dereference in the C++ attribute parsing path. A specially crafted EXR file containing an unknown-type attribute with dataSize set to zero causes the parser to create an opaque attribute with a NULL packeddata pointer. The OpaqueAttribute constructor passes...

CVE-2026-88384

OpenEXR 3.4.14 contains a NULL Pointer Dereference in the C++ attribute parsing path. A specially crafted EXR file containing an unknown-type attribute with dataSize set to zero causes the parser to create an opaque attribute with a NULL packeddata pointer. The OpaqueAttribute constructor passes...

CVE-2026-88384

The OpenEXR 3.4.14 library is vulnerable to a NULL Pointer Dereference within the C++ attribute parsing path. When processing a specially crafted EXR file that contains an unknown-type attribute with a dataSize of zero, the parser creates an opaque attribute with a NULL packed_data pointer . The ...

CVE-2026-88384: NULL Pointer Dereference

OpenEXR 3.4.14 contains a NULL Pointer Dereference in the C++ attribute parsing path. A specially crafted EXR file containing an unknown-type attribute with dataSize set to zero causes the parser to create an opaque attribute with a NULL packeddata pointer. The OpaqueAttribute constructor passes...

PT-2026-97950

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the Linux kernel, the functions eswin clk register pll and eswin register clkdiv declare a clk init data structure on the stack but only initialize specific fields, namely parent data...

PT-2026-97960

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the tps6594 regulator probe function, the multi-phase configuration loop fails to release node references acquired through of find node by name and of get parent. Specifically, the...

Linux Distros Unpatched Vulnerability : CVE-2026-88384

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR 3.4.14 contains a NULL Pointer Dereference in the C++ attribute parsing path. A specially crafted EXR file containing an unknown-type attribute with...

Linux Distros Unpatched Vulnerability : CVE-2026-93261

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - locking/lockdep: Fix NULL pointer dereference in locksetclass registerlockclass can return NULL when the lock class pool is exhausted, graphlock fails, or key...

Linux Distros Unpatched Vulnerability : CVE-2026-97506

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: ixp4xx - fix buffer chain unwind on allocation failure chainupbuffers builds a linked list of buffer descriptors for a scatterlist. If dmapoolalloc fail...

Linux Distros Unpatched Vulnerability : CVE-2026-97414

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365afesuspend mt8365afesuspend allocates the register backup buffer with devmkcallo...

Fedora 45 : 389-ds-base (2026-c1e25a4642)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c1e25a4642 advisory. - Resolves: rhbz2492927 CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer...

Linux Distros Unpatched Vulnerability : CVE-2026-97516

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtw88: Add NULL check for chip-edccath in rtwfwadaptivityresult It was recently reported that rtwfwadaptivityresult in fw.c dereferences rtwdev-chip-edcca...

Linux Distros Unpatched Vulnerability : CVE-2026-97513

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: chips-media: wave5: Release m2mctx after Instance Removed from List Possible use after free if IRQ thread manages to obtain spinlock between m2mctx relea...

CVE-2026-88384

OpenEXR 3.4.14 contains a NULL Pointer Dereference in the C++ attribute parsing path. A specially crafted EXR file containing an unknown-type attribute with dataSize set to zero causes the parser to create an opaque attribute with a NULL packeddata pointer. The OpaqueAttribute constructor passes...

PT-2026-97877

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client DFS cache where the get tgt name function returns an error pointer when the ce-tgthint variable is NULL. Additionally, the dfs cache noreq update tgthin...

PT-2026-97879

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference exists in the nfsd file net dispose function. During per-net teardown, the nn-nfsd serv pointer is cleared before the filecache laundrette is shut down. This...

PT-2026-97934

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the Bluetooth management component. The uuid count member of the discovery state structure is accessed and modified without proper locking, creating ...

PT-2026-97948

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the lock set class function. This occurs because register lock class can return NULL if the lock class pool is exhausted, graph lock fails, or key...

PT-2026-97961

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference occurs in the bcm2835 pinctrl probe function when devm pinctrl register fails. In this scenario, the system attempts to call gpiochip remove before gpiochip ad...