CVE-2026-88373

The libde265 library (commit 4d45a6b) contains a NULL pointer dereference vulnerability within the NAL parsing path . Specifically, when de265_push_NAL() is called with a zero-length NAL unit, it can produce a NAL_unit with a NULL backing buffer. This NULL buffer is subsequently passed as a desti...

CVE-2026-88384

OpenEXR 3.4.14 contains a NULL Pointer Dereference in the C++ attribut...

CVE-2026-88384

OpenEXR 3.4.14 contains a NULL Pointer Dereference in the C++ attribute parsing path. A specially crafted EXR file containing an unknown-type attribute with dataSize set to zero causes the parser to create an opaque attribute with a NULL packeddata pointer. The OpaqueAttribute constructor passes...

RockyLinux 9 : kernel (RLSA-2026:70459)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:70459 advisory. kernel: crypto: afalg - Disallow concurrent writes in afalgsendmsg CVE-2025-39964 kernel: iommu/vt-d: Clear Present bit before tearing down PASID entry...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

kernel: Linux kernel: libceph null pointer dereference leads to denial of service

A flaw was found in libceph, a component of the Linux kernel. When processing a malformed CRUSH map, if a parent bucket's name exists but its type is missing, a null pointer dereference can occur. This issue can lead to a system crash, resulting in a Denial of Service DoS...

CVE-2026-19888

A flaw was found in PgBouncer. Missing validation of a mandatory attribute in the SCRAM client-final-message parser allows an unauthenticated remote attacker to crash the process. By sending a malformed message, the parser can report success while a required value remains unset, leading to a NULL...

AZL-103430 CVE-2026-19888 affecting package pgbouncer 1.25.2-1

Missing validation of a mandatory attribute in the SCRAM client-final-message parser in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to crash the process. A malformed message can make the parser report success while leaving a required value unset, which is then dereferenced ...

CVE-2026-19888

Missing validation of a mandatory attribute in the SCRAM client-final-message parser in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to crash the process. A malformed message can make the parser report success while leaving a required value unset, which is then dereferenced ...

EUVD-2026-85365

Missing validation of a mandatory attribute in the SCRAM client-final-message parser in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to crash the process. A malformed message can make the parser report success while leaving a required value unset, which is then dereferenced ...

CVE-2026-12166_CVE-2026-12167_CVE-2026-12168

Múltiples vulnerabilidades de escalada de privilegios local en el controlador GFAC de Little Orbit GFACSysx64.sys | ---|--- IDs de CVE| CVE-2026-12166, CVE-2026-12167, CVE-2026-12168 Proveedor| Little Orbit Producto| Controlador GamersFirst Anti-Cheat GFAC GFACSysx64.sys Versiones afectadas| No h...

CVE-2026-42801

NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux asrrc module allows Pointer Manipulation. This vulnerability is associated with program file 3g.mod/lib/src/urrsir.c...

CVE-2026-57225

A flaw was found in Suricata, a network Intrusion Detection System. A NULL pointer dereference vulnerability exists when loading JSON or NDJSON datasets. This occurs because the system incorrectly assumes a configured valuekey will always resolve to a string. A trusted or untrusted dataset or rul...

EUVD-2026-85171

NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux asrrc module allows Pointer Manipulation. This vulnerability is associated with program file 3g.mod/lib/src/urrsir.c...

CVE-2026-42801

A NULL pointer dereference vulnerability exists in the as_rrc module of ASR Crane, Falcon on Linux . The flaw is located in the program file 3g.mod/lib/src/urrsir.c and can lead to Pointer Manipulation . The vulnerability has a HIGH base severity score of 7.4. No specific exploit information or r...

CVE-2026-42801 Deference after null check in as_rrc

NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux asrrc module allows Pointer Manipulation. This vulnerability is associated with program file 3g.mod/lib/src/urrsir.c...

CVE-2026-93588

A flaw was found in ImageMagick. When the PNM coder processes a specially crafted or sufficiently large image, it can reach a memory resource limit. The application fails to handle the memory allocation, leading to a null pointer dereference. This can result in a denial of service, causing the...

CVE-2026-93312

A flaw was found in Freedesktop Poppler. A remote attacker could exploit a null pointer dereference vulnerability in the JBIG2Stream::rewind function. This could lead to a denial of service DoS, making the application unavailable to legitimate users. Mitigation Since Poppler is a library used by...

TencentOS Server 4: nodejs20 (TSSA-2026:1043)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1043 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

ROS-20260923-73-0045

The vulnerability of the getaliasquirk function in the sound/usb/card.c module, which is part of the Linux operating system’s USB device support mechanism, involves the dereferencing of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...