MiracleLinux 9 : 389-ds-base-2.8.0-10.el9_8 (AXSA:2026-1821:07)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1821:07 advisory. 389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket CVE-2026-18355 389-ds-base:...

AlmaLinux 8 : gstreamer1-plugins-base (ALSA-2026:67145)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:67145 advisory. gstreamer1-plugins-base: gstreamer: NULL/invalid-pointer dereference in gstrtspmessageparseauthcredentials when parsing a crafted Digest...

CVE-2026-33970

An issue was discovered in NR RRC and L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 1680, W920, W930, W1000, and Modem 5410. In the 5G baseband, a NULL Pointer Dereference occurs when processing a malformed RR...

PT-2026-91273

A weakness has been identified in GNU Binutils 2.47. Affected is the function bfd putl64 of the file bfd/libbfd.c of the component ld. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been made available to the public and could be used for...

CVE-2026-33970

A NULL Pointer Dereference in the NR RRC and L2 components of Samsung's 5G baseband can be triggered by a malformed RRC Reconfiguration message. This affects a wide range of Exynos mobile processors, wearable processors, and modems (850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500,...

PT-2026-90996

A vulnerability has been found in GPAC up to f1219cde. The impacted element is an unknown function of the file scenegraph/vrml tools.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The exploit has been...

Important: openssl

Issue Overview: Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically...

ALSA-2026:67145 Moderate: gstreamer1-plugins-base security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins. Security Fixes: gstreamer1-plugins-base: gstreamer: NULL/invalid-pointer dereference in...

UBUNTU-CVE-2026-57225

datasets: NULL dereference on unexpected ndjson files...

CVE-2026-15891

The MQTT-SN client keepalive handler processping in subsys/net/lib/mqttsn/mqttsn.c removes the gateway record after PINGREQ retries are exhausted. It invoked SYSSLISTPEEKHEADCONTAINER&client-gateways, gw, next but discarded the result. That macro is a pure expression that does not assign to gw, s...

POC-CVE-2024-12227

CVE-2024-12227 - NTIOLibX64.sys DoS PoC MSI Dragon Center 的 NTIOLibX64.sys 驱动程序中 CVE-2024-12227（空指针解引用漏洞）的概念验证。 描述 NTIOLibX64.sys 版本 3.0.0.10 在 ReadPhysicalMemory 函数（IOCTL 0xC3506104）中存在空指针解引用漏洞。该驱动在调用 MmUnmapIoSpace 之前未检查 MmMapIoSpace 的返回值。如果 MmMapIoSpace 返回 NULL，则使用 NULL 指针调用 MmUnmapIoSpace...

CVE-2026-15891 NULL pointer dereference in Zephyr MQTT-SN client when removing a non-responsive gateway

The MQTT-SN client keepalive handler processping in subsys/net/lib/mqttsn/mqttsn.c removes the gateway record after PINGREQ retries are exhausted. It invoked SYSSLISTPEEKHEADCONTAINER&client-gateways, gw, next but discarded the result. That macro is a pure expression that does not assign to gw, s...

CVE-2026-15891 NULL pointer dereference in Zephyr MQTT-SN client when removing a non-responsive gateway

The MQTT-SN client keepalive handler processping in subsys/net/lib/mqttsn/mqttsn.c removes the gateway record after PINGREQ retries are exhausted. It invoked SYSSLISTPEEKHEADCONTAINER&client-gateways, gw, next but discarded the result. That macro is a pure expression that does not assign to gw, s...

CVE-2026-15891

CVE-2026-15891 is a NULL pointer dereference in the Zephyr RTOS MQTT-SN client. The keepalive handler process_ping() in subsys/net/lib/mqtt_sn/mqtt_sn.c discards the return value of SYS_SLIST_PEEK_HEAD_CONTAINER, leaving the gw pointer as NULL. The code then dereferences gw->gw_id and passes i...

EUVD-2026-77132

The MQTT-SN client keepalive handler processping in subsys/net/lib/mqttsn/mqttsn.c removes the gateway record after PINGREQ retries are exhausted. It invoked SYSSLISTPEEKHEADCONTAINER&client-gateways, gw, next but discarded the result. That macro is a pure expression that does not assign to gw, s...

CVE-2022-36804-Bitbucket-RCE-Analysis

CVE-2022-36804: Bitbucket リモートコマンド実行 RCE ヌルバイト引数インジェクションの技術分析とラボ環境での実証 脆弱性の概要 CVE-2022-36804 は、Atlassian Bitbucket Server および Data Center の REST API における高/重大度の引数インジェクション 脆弱性です。 公式の NVDNational Vulnerability Database基本スコアは、読み取り権限が必要PR:Lという前提に基づく 8.8 High ですが、本分析では 9.8 Critical...

CVE-2026-90576

A security vulnerability has been detected in GPAC up to f1219cde. Affected is the function gfnodelistaddchild of the file scenegraph/basescenegraph.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The explo...

CVE-2025-68325

CVE-2025-68325 schcake は、cakeenqueue がNULL以外の結果を返す場合を考慮していないため、qdiscツリー内のqlenが不均衡になり、親スケジューラ（例: qfq）でNULL参照が発生します。 影響を受けるバージョン v6.19-rc1 で修正されました。 重要度 低 パッチ root@kitploit: In cakedrop, qdisctreereducebacklog is used to update the qlen and backlog of the qdisc hierarchy. Its caller, cakeenqueue,...

CVE-2026-90573

A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gfsgmfurldel of the file scenegraph/vrmltools.c of the component MP4Box. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit is publicly...

EUVD-2026-77061

A security vulnerability has been detected in GPAC up to f1219cde. Affected is the function gfnodelistaddchild of the file scenegraph/basescenegraph.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The explo...