CVE-2024-26475

CVE-2024-26475 Authors Sherlock Fang, Vlad Tronciu, Ayam Babu Description An issue in radareorg radare2 v.0.9.7 through v.5.8.6 and fixed in v.5.8.8 allows a local attacker to cause a denial of service via the grubsfsreadextent function. Attack Vectors Crafting a payload to cause “treeblock =...

Adobe InDesign < 20.5.5 / 21.0 < 21.6.0 Multiple Application denial-of-service (APSB26-145)

The version of Adobe InDesign installed on the remote Windows host is prior to 20.5.5, 21.6.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-145 advisory. - NULL Pointer Dereference CWE-476 potentially leading to Application denial-of-service CVE-2026-76192,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mutt (UTSA-2023-002883)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002883 advisory. Null pointer dereference when composing from a specially crafted draft message in Mutt 1.5.2 1.5.2 2.2.12 Tenable has extracted the preceding description block...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000551)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000551 advisory. NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163. Tenable has extracted the preceding description block directly from the Unity Linux security...

CVE-2026-88339

A NULL pointer dereference vulnerability exists in the gfsgvrmlfieldclone function of GPAC 2d7da22e 26.08-DEV. The vulnerability occurs when cloning a PROTO default SFImage field with a NULL source pointer. An attacker can provide a specially crafted input file that triggers the condition,...

CVE-2026-88339

A NULL pointer dereference vulnerability exists in the gf_sg_vrml_field_clone() function of GPAC 2d7da22e (26.08-DEV) . The flaw is triggered when cloning a PROTO default SFImage field with a NULL source pointer. An attacker can exploit this by providing a specially crafted input file , which res...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002319)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002319 advisory. A null pointer dereference issue was discovered in function guix11createblankmouse in guix11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: yasm (UTSA-2023-002669)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002669 advisory. Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libxml2 (UTSA-2023-001598)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001598 advisory. In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occurs in...

Unity Linux 20.1060e / 20.1070e Security Update: wpa_supplicant (UTSA-2021-001735)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2021-001735 advisory. The EAP-pwd implementation in hostapd EAP server before 2.8 and wpasupplicant EAP peer before 2.8 does not validate fragmentation reassembly state properly for a cas...

EUVD-2026-84855

A NULL pointer dereference vulnerability exists in the gfsgvrmlfieldclone function of GPAC 2d7da22e 26.08-DEV. The vulnerability occurs when cloning a PROTO default SFImage field with a NULL source pointer. An attacker can provide a specially crafted input file that triggers the condition,...

AlmaLinux 9 : gstreamer1-plugins-base (ALSA-2026:69100)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:69100 advisory. gstreamer: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow CVE-2026-18297 gstreamer1-plugins-base: gstreamer: NULL/invalid-point...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002315)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002315 advisory. NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392. Tenable has extracted the preceding description block directly from the Unity Linux security...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: LibRaw (UTSA-2026-090027)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090027 advisory. LibRaw::raw2image in librawcxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference. Tenable has extracted the preceding description block directly from the Unity Lin...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000576)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000576 advisory. NULL Pointer Dereference in function vimregexecstring at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901. NULL Pointer Dereference in function...

CVE-2026-88339

A NULL pointer dereference vulnerability exists in the gfsgvrmlfieldclone function of GPAC 2d7da22e 26.08-DEV. The vulnerability occurs when cloning a PROTO default SFImage field with a NULL source pointer. An attacker can provide a specially crafted input file that triggers the condition,...

Adobe InDesign < 20.5.5 / 21.0 < 21.6.0 Multiple Application denial-of-service (APSB26-145) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 20.5.5, 21.6.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-145 advisory. - NULL Pointer Dereference CWE-476 potentially leading to Application denial-of-service CVE-2026-76192,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002745)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002745 advisory. NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531. Tenable has extracted the preceding description block directly from the Unity Linux security...

CVE-2026-48521

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's ProdClusterManagerFactory::allocateConnPool dereferences transportsocketoptions while selecting an HTTP/3 connection pool without first checking whether the...

CVE-2026-73547

Envoy 's ext_authz filter contains a null pointer dereference: when an authorization response includes query_parameters_to_set or query_parameters_to_remove, the filter calls request_headers_-&gt;Path() to parse the query string. A path-less CONNECT request causes that pointer to be null, and Fil...