CVE-2026-42801: NULL Pointer Dereference

NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux asrrc module allows Pointer Manipulation. This vulnerability is associated with program file 3g.mod/lib/src/urrsir.c...

PT-2026-97388

Name of the Vulnerable Software and Affected Versions PgBouncer versions prior to 1.25.3 Description An issue exists in the SCRAM Salted Challenge Response Authentication Mechanism client-final-message parser. The parser fails to validate a mandatory attribute, which can lead to a NULL pointer...

ROS-20260923-73-0050

The vulnerability of the acmbind function in the drivers/usb/gadget/function/facm.c file of the Linux device driver framework is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

PT-2026-104838

Missing validation of a mandatory attribute in the SCRAM client-final-message parser in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to crash the process. A malformed message can make the parser report success while leaving a required value unset, which is then dereferenced ...

CVE-2026-19888: NULL Pointer Dereference

Missing validation of a mandatory attribute in the SCRAM client-final-message parser in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to crash the process. A malformed message can make the parser report success while leaving a required value unset, which is then dereferenced ...

Linux Distros Unpatched Vulnerability : CVE-2026-91780

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in GNU Binutils 2.47. This impacts the function elflinkaddobjectsymbols of the file bfd/elflink.c. Executing a manipulation can...

Linux Distros Unpatched Vulnerability : CVE-2026-91779

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security flaw has been discovered in GNU Binutils 2.47. This affects the function bfdelfehframesectionoffset of the file bfd/elf-eh-frame.c of the component E...

ROS-20260923-73-0048

The vulnerability of the ncmbind function in the drivers/usb/gadget/function/fncm.c file of the Linux device driver kernel module is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-114148

Name of the Vulnerable Software and Affected Versions FreeRDP versions 2.0.0 through 3.31.0 Description A null pointer dereference occurs when malicious RDP servers send out-of-lifecycle serial IRPs I/O Request Packets. By sending IRP MJ READ or IRP MJ WRITE before the create phase or after the...

ROS-20260923-73-0091

The vulnerability of the pciepftestcleandmachan function in the driver/pci/endpoint/functions/pci-epf-test.c module of the Linux operating system’s PCI device drivers is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260923-73-0049

The vulnerability of the ecmbind function in the drivers/usb/gadget/function/fecm.c file of the Linux device driver kernel module is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

TencentOS Server 4: nodejs20 (TSSA-2026:1043)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1043 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

ROS-20260923-73-0045

The vulnerability of the getaliasquirk function in the sound/usb/card.c module, which is part of the Linux operating system’s USB device support mechanism, involves the dereferencing of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

TencentOS Server 3: haproxy (TSSA-2026:1062)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1062 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Linux Distros Unpatched Vulnerability : CVE-2026-91781

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elfx8664commonsectionindex of the file bfd/elf64-x86-64.c of the...

MiracleLinux 9 : gstreamer1-plugins-base-1.22.12-8.el9_8.2 (AXSA:2026-1897:03)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1897:03 advisory. gstreamer: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow CVE-2026-18297 gstreamer1-plugins-base: gstreamer:...

CVE-2026-88339

A NULL pointer dereference vulnerability exists in the gfsgvrmlfieldclone function of GPAC 2d7da22e 26.08-DEV. The vulnerability occurs when cloning a PROTO default SFImage field with a NULL source pointer. An attacker can provide a specially crafted input file that triggers the condition,...

CVE-2026-88339

A NULL pointer dereference vulnerability exists in the gfsgvrmlfieldclone function of GPAC 2d7da22e 26.08-DEV. The vulnerability occurs when cloning a PROTO default SFImage field with a NULL source pointer. An attacker can provide a specially crafted input file that triggers the condition,...

UBUNTU-CVE-2026-88339

A NULL pointer dereference vulnerability exists in the gfsgvrmlfieldclone function of GPAC 2d7da22e 26.08-DEV. The vulnerability occurs when cloning a PROTO default SFImage field with a NULL source pointer. An attacker can provide a specially crafted input file that triggers the condition,...

CVE-2026-84396

InDesign Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in...