ROS-20261016-73-0005

The vulnerability of the gfs2evict inode function in the fs/gfs2/super.c module of the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-111144

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libansilove 1.3.0 through 1.4.2 contains a NULL pointer dereference vulnerability in ansilovexbin that allows attackers to crash applications by supplying a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131747)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131747 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix NULL deref in ntfsupdatemftmirr If ntfsfillsuper wasn't called then sbi-sb will be...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131770)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131770 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Check 'folio' pointer for NULL It can be NULL if bmap is called. Tenable has extracted...

CVE-2026-57486: NULL Pointer Dereference

pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, ixmlNodecompare in ixml/src/node.c passes the nullable nodeValue, namespaceURI, prefix, and localName fields directly to strcmp. Non-namespaced attributes created by ixmlDocumentcreateAttribute...

PT-2026-125055

Seekable did not record whether it was initialized. On a fresh Seekable, or one whose init buff failed, decompress, offset to frame index and frame decompressed size made the C library read a NULL seek table. After a failed re-initialization, decompress returned data from the refused buffer using...

AlmaLinux 9.2 [TuxCare] Security Update: libreswan (ALMALINUX9.2:CLSA-2026:1792158739)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792158739 advisory. - Libreswan has a null pointer dereference bug in the PKCS7 handling code for IKE certificate authentication. When libreswan decodes an IKE...

PT-2026-115638

Name of the Vulnerable Software and Affected Versions libIEC61850 versions prior to 1.6.2 Description The alternateArrayAccess function in src/mms/iso mms/server/mms read service.c fails to validate the alternate-access sub-array range when the numberOfElements variable is greater than zero. This...

Red Hat: CVE-2026-111373: freerdp: FreeRDP: Denial of Service via zero-length WebSocket ping

FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket transport that allows a malicious gateway to crash clients by sending zero-length pings. When the payload length is zero, websocketreplypong passes a nullptr stream to websocketreplyclose, triggering an...

Linux Distros Unpatched Vulnerability : CVE-2026-111129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Open Asset Import Library assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D binary mesh importer's...

SUSE CVE-2026-110829

FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a fragment sets CHANNELFLAGLAST without CHANNELFLAGFIRST. A malicious RDP server can send a malformed rdpsnd PDU on a fresh channel to crash the client and cause denial of service...

SUSE CVE-2026-110834

FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP servers to crash clients by sending out-of-lifecycle serial IRPs. Attackers can send IRPMJREAD or IRPMJWRITE before create or after close, causing CommReadFile or CommWriteFile to...

EUVD-2023-59906

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CLSA-2026-1792097614 Fix CVE(s): CVE-2026-107778

SECURITY UPDATE: NULL pointer dereference in krb5rdcred - debian/patches/CVE-2026-107778.patch: reject a KRB-CRED message whose encrypted ticket-info list is shorter than its tickets list in src/lib/krb5/krb/rdcred.c makecredlist; backport of upstream commit 48afa9abb89ab2176bb20624d87d010b9984fc...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference due to improper handling of array schemas that omit the items keyword in request validation. An attacker can cause the application to panic and potentially crash by submitting crafted requests that trigger...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference through the resolveComponent process in the OpenAPI specification loader when handling a self-referential $ref in additionalProperties without proper nil-checks. An attacker can cause the application to crash by...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the openapi3filter process when handling OpenAPI 3.1 schemas that declare an array type without specifying items. An attacker can cause the application to crash by sending a crafted HTTP request with a...

DEBIAN-CVE-2026-111144

libansilove 1.3.0 through 1.4.2 contains a NULL pointer dereference vulnerability in ansilovexbin that allows attackers to crash applications by supplying a crafted XBIN file. Attackers can set the 512-character flag without the custom-font flag, causing drawchar to index a NULL highfontdataxbin...

CVE-2026-111144

libansilove 1.3.0 through 1.4.2 contains a NULL pointer dereference vulnerability in ansilovexbin that allows attackers to crash applications by supplying a crafted XBIN file. Attackers can set the 512-character flag without the custom-font flag, causing drawchar to index a NULL highfontdataxbin...

DEBIAN-CVE-2026-111129

Open Asset Import Library assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D binary mesh importer's OgreBinarySerializer::ReadAnimationKeyFrames handling of unvalidated animation track targets. Attackers can supply a crafted .mesh file with a morph animation trac...