CVE-2026-93312

A flaw was found in Freedesktop Poppler. A remote attacker could exploit a null pointer dereference vulnerability in the JBIG2Stream::rewind function. This could lead to a denial of service DoS, making the application unavailable to legitimate users. Mitigation Since Poppler is a library used by...

SUSE CVE-2026-48521

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's ProdClusterManagerFactory::allocateConnPool dereferences transportsocketoptions while selecting an HTTP/3 connection pool without first checking whether the...

CVE-2026-42801: NULL Pointer Dereference

NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux asrrc module allows Pointer Manipulation. This vulnerability is associated with program file 3g.mod/lib/src/urrsir.c...

PT-2026-97243

Name of the Vulnerable Software and Affected Versions ASR Crane, Falcon on Linux affected versions not specified Description A NULL pointer dereference in the as rrc module allows for pointer manipulation. This issue is associated with the program file 3g.mod/lib/src/urrsir.c. A NULL pointer...

Linux Distros Unpatched Vulnerability : CVE-2026-89784

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SUNRPC: check rpcsockaddr2uaddr return value in rpcbregisterinet4/6 rpcbregisterinet4 and rpcbregisterinet6 store the result of rpcsockaddr2uaddr into map-raddr...

Linux Distros Unpatched Vulnerability : CVE-2026-91782

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in GNU Binutils 2.47. Affected by this vulnerability is the function elfx86allocatedynrelocs of the file bfd/elfxx-x86.c of the...

ROS-20260923-73-0051

The vulnerability of the rndisbind function in the drivers/usb/gadget/function/frndis.c file of the Linux kernel’s USB device driver is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-97388

Name of the Vulnerable Software and Affected Versions PgBouncer versions prior to 1.25.3 Description An issue exists in the SCRAM Salted Challenge Response Authentication Mechanism client-final-message parser. The parser fails to validate a mandatory attribute, which can lead to a NULL pointer...

ROS-20260923-73-0050

The vulnerability of the acmbind function in the drivers/usb/gadget/function/facm.c file of the Linux device driver framework is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

PT-2026-104838

Missing validation of a mandatory attribute in the SCRAM client-final-message parser in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to crash the process. A malformed message can make the parser report success while leaving a required value unset, which is then dereferenced ...

CVE-2026-19888: NULL Pointer Dereference

Missing validation of a mandatory attribute in the SCRAM client-final-message parser in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to crash the process. A malformed message can make the parser report success while leaving a required value unset, which is then dereferenced ...

ROS-20260923-73-0048

The vulnerability of the ncmbind function in the drivers/usb/gadget/function/fncm.c file of the Linux device driver kernel module is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-91780

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in GNU Binutils 2.47. This impacts the function elflinkaddobjectsymbols of the file bfd/elflink.c. Executing a manipulation can...

Linux Distros Unpatched Vulnerability : CVE-2026-91779

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security flaw has been discovered in GNU Binutils 2.47. This affects the function bfdelfehframesectionoffset of the file bfd/elf-eh-frame.c of the component E...

PT-2026-114148

Name of the Vulnerable Software and Affected Versions FreeRDP versions 2.0.0 through 3.31.0 Description A null pointer dereference occurs when malicious RDP servers send out-of-lifecycle serial IRPs I/O Request Packets. By sending IRP MJ READ or IRP MJ WRITE before the create phase or after the...

Linux Distros Unpatched Vulnerability : CVE-2026-91781

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elfx8664commonsectionindex of the file bfd/elf64-x86-64.c of the...

MiracleLinux 9 : gstreamer1-plugins-base-1.22.12-8.el9_8.2 (AXSA:2026-1897:03)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1897:03 advisory. gstreamer: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow CVE-2026-18297 gstreamer1-plugins-base: gstreamer:...

ROS-20260923-73-0091

The vulnerability of the pciepftestcleandmachan function in the driver/pci/endpoint/functions/pci-epf-test.c module of the Linux operating system’s PCI device drivers is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260923-73-0049

The vulnerability of the ecmbind function in the drivers/usb/gadget/function/fecm.c file of the Linux device driver kernel module is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260923-73-0045

The vulnerability of the getaliasquirk function in the sound/usb/card.c module, which is part of the Linux operating system’s USB device support mechanism, involves the dereferencing of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...