85367 matches found
CVE-2026-76787
The UpdateHub firmware-over-the-air client parses the CoAP probe response with Zephyr's JSON library in zimplupdatehubprobe subsys/mgmt/updatehub/updatehub.c. The decoder treats every descriptor field as optional — jsonobjparse returns a bitmask of the fields it actually decoded and never fails o...
CVE-2026-76787
The UpdateHub firmware-over-the-air (FOTA) client in Zephyr is vulnerable to a NULL pointer dereference within the z_impl_updatehub_probe() function. The issue occurs because the JSON decoder treats the sha256sum field as optional; if a network peer omits this string in a CoAP probe response, the...
CVE-2026-76787 NULL pointer dereference in the UpdateHub FOTA client when probe metadata omits sha256sum
The UpdateHub firmware-over-the-air client parses the CoAP probe response with Zephyr's JSON library in zimplupdatehubprobe subsys/mgmt/updatehub/updatehub.c. The decoder treats every descriptor field as optional — jsonobjparse returns a bitmask of the fields it actually decoded and never fails o...
EUVD-2026-104599
The UpdateHub firmware-over-the-air client parses the CoAP probe response with Zephyr's JSON library in zimplupdatehubprobe subsys/mgmt/updatehub/updatehub.c. The decoder treats every descriptor field as optional — jsonobjparse returns a bitmask of the fields it actually decoded and never fails o...
CVE-2026-76787 NULL pointer dereference in the UpdateHub FOTA client when probe metadata omits sha256sum
The UpdateHub firmware-over-the-air client parses the CoAP probe response with Zephyr's JSON library in zimplupdatehubprobe subsys/mgmt/updatehub/updatehub.c. The decoder treats every descriptor field as optional — jsonobjparse returns a bitmask of the fields it actually decoded and never fails o...
CVE-2025-52290
A flaw was found in ffmpeg. An attacker could exploit this vulnerability by providing a crafted media file to be processed by the application. This issue triggers a NULL pointer dereference in the avprivh264hasnumreorderframes function, leading to an unexpected application crash and resulting in ...
CVE-2026-112259
A flaw was found in GIMP. Importing a crafted SBZ palette without a color-model attribute can cause a NULL pointer dereference during string comparison, resulting in denial of service of the GIMP application...
CVE-2026-66859
A flaw was found in Apache Thrift. A remote attacker can cause a Denial of Service DoS by triggering an application crash due to improper memory handling in the C GLib bindings. This vulnerability stems from an uninitialized variable and a null pointer dereference during data processing...
CVE-2026-98467
A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for ARM64 architecture. A race condition during the teardown of nested virtual machine memory mappings can cause the kernel to dereference a null pointer. A local user or nested guest can trigger concurrent memory...
CVE-2026-112259
A flaw was found in GIMP. Importing a crafted SBZ palette without a color-model attribute can cause a NULL pointer dereference during string comparison, resulting in denial of service of the GIMP application. Mitigation Avoid importing untrusted SBZ palette files. If GIMP is unused, remove the gi...
CVE-2026-112259 Gimp: gimp: null pointer dereference in swatchbooker (sbz) palette import
A flaw was found in GIMP. Importing a crafted SBZ palette without a color-model attribute can cause a NULL pointer dereference during string comparison, resulting in denial of service of the GIMP application...
EUVD-2026-104572
A flaw was found in GIMP. Importing a crafted SBZ palette without a color-model attribute can cause a NULL pointer dereference during string comparison, resulting in denial of service of the GIMP application...
CVE-2026-112259
A flaw in GIMP allows for a NULL pointer dereference during the import of a crafted SBZ palette file. Specifically, if the palette lacks a color-model attribute , the application triggers a null pointer dereference during a string comparison operation. This vulnerability leads to a denial of serv...
CVE-2026-112259 Gimp: gimp: null pointer dereference in swatchbooker (sbz) palette import
A flaw was found in GIMP. Importing a crafted SBZ palette without a color-model attribute can cause a NULL pointer dereference during string comparison, resulting in denial of service of the GIMP application...
DEBIAN-CVE-2025-52290
A NULL pointer dereference in the avprivh264hasnumreorderframes function of Ffmpeg version N-119856-gbe46370941 allows attackers to cause a Denial of Service DoS via processing a crafted media file...
CVE-2025-52290
A NULL pointer dereference in the avprivh264hasnumreorderframes function of Ffmpeg version N-119856-gbe46370941 allows attackers to cause a Denial of Service DoS via processing a crafted media file...
CVE-2026-91781
A flaw was found in GNU Binutils. A local attacker could exploit a null pointer dereference vulnerability in the ELF Section Handler. This could lead to a Denial of Service DoS, making the affected system or application unavailable...
CVE-2026-91779
A flaw was found in GNU Binutils. A local attacker can trigger a null pointer dereference within the Eh Frame Handler component by performing a specific manipulation. This vulnerability can lead to a Denial of Service DoS, making the affected system or application unavailable...
CVE-2026-91782
A flaw was found in GNU Binutils. A local attacker could exploit a null pointer dereference in the elfx86allocatedynrelocs function. This vulnerability could lead to a Denial of Service DoS condition, making the affected system or application unavailable...
CVE-2026-91780
A flaw was found in GNU Binutils. A local attacker can trigger a null pointer dereference by manipulating input to the 'elflinkaddobjectsymbols' function. This can lead to a denial of service DoS condition, making the affected component unavailable...