Lucene search
+L

43892 matches found

OSV
OSV
•added 2026/09/14 3:30 a.m.•12 views

CVE-2026-90622 GNU libredwg Layer Encoding dwg.spec DWG_TABLE null pointer dereference

A security flaw has been discovered in GNU libredwg 0.13.4. This impacts the function DWGTABLE of the file src/dwg.spec of the component Layer Encoding. Performing a manipulation results in null pointer dereference. The attack needs to be approached locally. The exploit has been released to the...

4.8CVSS4.5AI score
SaveExploits0References11
Cvelist
Cvelist
•added 2026/09/14 3:30 a.m.•47 views

CVE-2026-90622 GNU libredwg Layer Encoding dwg.spec DWG_TABLE null pointer dereference

A security flaw has been discovered in GNU libredwg 0.13.4. This impacts the function DWGTABLE of the file src/dwg.spec of the component Layer Encoding. Performing a manipulation results in null pointer dereference. The attack needs to be approached locally. The exploit has been released to the...

4.8CVSS0.00168EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
•added 2026/09/14 3:30 a.m.•10 views

CVE-2026-90622 GNU libredwg Layer Encoding dwg.spec DWG_TABLE null pointer dereference

A security flaw has been discovered in GNU libredwg 0.13.4. This impacts the function DWGTABLE of the file src/dwg.spec of the component Layer Encoding. Performing a manipulation results in null pointer dereference. The attack needs to be approached locally. The exploit has been released to the...

4.8CVSS4.3AI score0.00168EPSS
SaveExploits0References9
CVE
CVE
•added 2026/09/14 3:30 a.m.•31 views

CVE-2026-90622

GNU libredwg 0.13.4 is affected by a null pointer dereference in the DWG_TABLE function of the Layer Encoding component (src/dwg.spec). The root cause is two raw zeroing assignments introduced by commit 27118c40 ("encode: also disable LAYER.material") that dereferenced a NULL material handle , wh...

4.8CVSS4.3AI score0.00168EPSS
SaveExploits0References9
NVD
NVD
•added 2026/09/14 3:16 a.m.•19 views

CVE-2026-33970

An issue was discovered in NR RRC and L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 1680, W920, W930, W1000, and Modem 5410. In the 5G baseband, a NULL Pointer Dereference occurs when processing a malformed RR...

3.5CVSS0.00315EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/14 1:16 a.m.•12 views

CVE-2026-90609

A vulnerability has been found in GPAC up to f1219cde. The impacted element is an unknown function of the file scenegraph/vrmltools.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The exploit has been...

4.8CVSS0.00168EPSS
SaveExploits0References9
OSV
OSV
•added 2026/09/14 1:16 a.m.•8 views

UBUNTU-CVE-2026-90609

A vulnerability has been found in GPAC up to f1219cde. The impacted element is an unknown function of the file scenegraph/vrmltools.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The exploit has been...

4.8CVSS4.2AI score0.00168EPSS
SaveExploits0References11
UbuntuCve
UbuntuCve
•added 2026/09/14 1:16 a.m.•16 views

CVE-2026-90609

A vulnerability has been found in GPAC up to f1219cde. The impacted element is an unknown function of the file scenegraph/vrmltools.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The exploit has been...

4.8CVSS4.3AI score0.00168EPSS
SaveExploits0References10
EUVD
EUVD
•added 2026/09/14 12:30 a.m.•13 views

EUVD-2026-77146

A vulnerability has been found in GPAC up to f1219cde. The impacted element is an unknown function of the file scenegraph/vrmltools.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The exploit has been...

4.8CVSS4.2AI score0.00168EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
•added 2026/09/14 12:30 a.m.•8 views

CVE-2026-90609 GPAC MP4Box vrml_tools.c null pointer dereference

A vulnerability has been found in GPAC up to f1219cde. The impacted element is an unknown function of the file scenegraph/vrmltools.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The exploit has been...

4.8CVSS4.4AI score0.00168EPSS
SaveExploits0References9
CVE
CVE
•added 2026/09/14 12:30 a.m.•26 views

CVE-2026-90609

CVE-2026-90609 affects GPAC (up to commit f1219cde), specifically a null pointer dereference in the MP4Box component within the file scenegraph/vrml_tools.c. The vulnerability is triggered locally with low complexity and low privileges required, resulting in a low availability impact (likely a cr...

4.8CVSS4.4AI score0.00168EPSS
SaveExploits0References9
OSV
OSV
•added 2026/09/14 12:30 a.m.•9 views

CVE-2026-90609 GPAC MP4Box vrml_tools.c null pointer dereference

A vulnerability has been found in GPAC up to f1219cde. The impacted element is an unknown function of the file scenegraph/vrmltools.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The exploit has been...

4.8CVSS4.5AI score
SaveExploits0References11
Cvelist
Cvelist
•added 2026/09/14 12:30 a.m.•41 views

CVE-2026-90609 GPAC MP4Box vrml_tools.c null pointer dereference

A vulnerability has been found in GPAC up to f1219cde. The impacted element is an unknown function of the file scenegraph/vrmltools.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The exploit has been...

4.8CVSS0.00168EPSS
SaveExploits0References9
Amazon
Amazon
•added 2026/09/14 12:00 a.m.•10 views

Important: ecs-service-connect-agent

Issue Overview: An Envoy proxy handling HTTP/3 connections can dereference a null transport socket option during the selection of a connection pool. This null pointer dereference is a CWE-476 flaw that may cause the process to crash or terminate unexpectedly, leading to a denial of service for th...

6.3AI score0.00827EPSS
SaveExploits0
Amazon
Amazon
•added 2026/09/14 12:00 a.m.•11 views

Important: ecs-service-connect-agent

Issue Overview: An Envoy proxy handling HTTP/3 connections can dereference a null transport socket option during the selection of a connection pool. This null pointer dereference is a CWE-476 flaw that may cause the process to crash or terminate unexpectedly, leading to a denial of service for th...

6.4AI score0.00827EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/14 12:00 a.m.•3 views

CVE-2026-65412: NULL Pointer Dereference

A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. Processing web content may lead to a denial-of-service...

6.5CVSS5.5AI score0.00469EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/09/14 12:00 a.m.•15 views

PT-2026-91754

A weakness has been identified in GNU Binutils 2.47. This issue affects the function bfd elf set group contents of the file bfd/elf.c of the component SHT GROUP Section Handler. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. The exploit has...

5.3CVSS4.9AI score0.00172EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/14 12:00 a.m.•4 views

CVE-2026-16702: NULL Pointer Dereference

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a remote authenticated attacker to cause a denial of service due to a null pointer dereference...

6.5CVSS5.6AI score0.00345EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/14 12:00 a.m.•13 views

PT-2026-91262

Name of the Vulnerable Software and Affected Versions SSSD System Security Services Daemon affected versions not specified Description A local attacker with privileges to connect to the PAM Pluggable Authentication Modules responder socket can send a specially crafted protocol request. When the p...

5.5CVSS5.5AI score0.00155EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/09/14 12:00 a.m.•12 views

PT-2026-91753

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.47 Description A flaw in the ELF Orphan Section Handler component allows a local attacker to cause a null pointer dereference, which occurs when the system attempts to read or write to a memory address that is null,...

6.6CVSS5.8AI score0.00188EPSS
SaveExploits1References17
Rows per page
Query Builder