CVE-2026-17009

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 contain a NULL pointer dereference exploitable by a local attacker with low privileges, causing denial of service (CVSS 4.7 MEDIUM). Exploitation requires high complexity; no exploit code or in-the-wild activity is documented. The IBM support reference is prov...

K000163013: LibTIFF vulnerabilities CVE-2018-17000, CVE-2018-19210, CVE-2019-7663, CVE-2020-19131, and CVE-2020-19144

Security Advisory Description CVE-2018-17000 A NULL pointer dereference in the function TIFFmemcmp at tifunix.c called from TIFFWriteDirectoryTagTransferfunction in LibTIFF 4.0.9 allows an attacker to cause a denial-of-service through a crafted tiff file. This vulnerability can be triggered by th...

CVE-2026-77641

tor before 0.4.9.9 was prone to a NULL write after free when sending a CONFLUXSWITCH cell fails. The return value of relaysendcommandfromedge was ignored, so a send failure which calls circuitmarkforclose and removes the leg via cfxdelleg would go undetected, causing the caller to write to the...

CVE-2026-74387

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA sequencer MIDI component. A race condition exists during the teardown of MIDI output with event input processing. This can allow a local attacker to trigger a null pointer dereference or use-after-free condition...

CVE-2026-74366

A flaw was found in the Linux kernel's ath12k Wi-Fi driver. When a new Wi-Fi link fails to initialize correctly, the driver may attempt to access uninitialized data, leading to a null pointer dereference. This can cause the system to crash, resulting in a Denial of Service DoS...

CVE-2026-74342

A flaw was found in the Linux kernel's kernfs file system. This vulnerability allows a local attacker to cause a Denial of Service DoS by triggering a NULL pointer dereference. The issue occurs when the kernfs security initialization hook is invoked before critical parent node information is...

CVE-2026-74335

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. This vulnerability occurs in the bpftaskfromvpid function when a cgroupskb program, running in a soft interrupt, attempts to look up a task that is in the process of exiting. If the task's process ID PID namespace is...

CVE-2026-63380

Libevent is an event notification library. Prior to 2.2.2-alpha, libevent can dereference invalid list pointers in ws.c when evwsnewsession enters its error path after evhttpstartws succeeds but buffereventenablelocking fails. evwsconnectionfree sees a non-null httpserver and unconditionally call...

CVE-2026-63380 Libevent: Null Pointer Dereference in `evws_new_session`

Libevent is an event notification library. Prior to 2.2.2-alpha, libevent can dereference invalid list pointers in ws.c when evwsnewsession enters its error path after evhttpstartws succeeds but buffereventenablelocking fails. evwsconnectionfree sees a non-null httpserver and unconditionally call...

EUVD-2026-63506

Libevent is an event notification library. Prior to 2.2.2-alpha, libevent can dereference invalid list pointers in ws.c when evwsnewsession enters its error path after evhttpstartws succeeds but buffereventenablelocking fails. evwsconnectionfree sees a non-null httpserver and unconditionally call...

CVE-2026-63380 Libevent: Null Pointer Dereference in `evws_new_session`

Libevent is an event notification library. Prior to 2.2.2-alpha, libevent can dereference invalid list pointers in ws.c when evwsnewsession enters its error path after evhttpstartws succeeds but buffereventenablelocking fails. evwsconnectionfree sees a non-null httpserver and unconditionally call...

CVE-2026-63380 Libevent: Null Pointer Dereference in `evws_new_session`

Libevent is an event notification library. Prior to 2.2.2-alpha, libevent can dereference invalid list pointers in ws.c when evwsnewsession enters its error path after evhttpstartws succeeds but buffereventenablelocking fails. evwsconnectionfree sees a non-null httpserver and unconditionally call...

CVE-2026-74327

A flaw was found in the Linux kernel. A local attacker could trigger a null pointer dereference in the isvmareahugepages function. This occurs when findvmarea returns a NULL value, which is not properly handled before being dereferenced. Successful exploitation of this vulnerability could lead to...

libxml2: libxml2: NULL pointer dereference parsing nextCatalog without catalog attribute

A flaw was found in libxml2. A local user or an attacker providing a specially crafted XML catalog can trigger a NULL pointer dereference during XML catalog parsing. This occurs when a nextCatalog element lacks its mandatory catalog attribute, leading to the application crashing and causing a...

CVE-2026-74304

A flaw was found in the Bluetooth subsystem of the Linux kernel, specifically within the hciqca module. This vulnerability occurs when the qcasetup function is called for hciuart devices connected through non-serdev paths, leading to a NULL pointer dereference. A local attacker could potentially...

CVE-2026-76881

A flaw was found in Wireshark. A NULL pointer dereference vulnerability exists within the CMS Cryptographic Message Syntax protocol dissector. This issue can be triggered by processing a specially crafted network capture file, leading to an application crash. A remote attacker could exploit this ...

CVE-2026-74274

A flaw was found in the Linux kernel's CXL Compute Express Link driver. When endpoint decoders are removed from a CXL region's target array, the driver can fail to properly fill the resulting NULL pointer holes. This can lead to the system attempting to access a NULL pointer, causing a general...

CVE-2026-74286

A flaw was found in the Linux kernel's Packet Forwarding Control Protocol PFCP module. The module fails to properly allocate per-CPU statistics, leaving a pointer uninitialized. A local attacker can exploit this by creating a PFCP rtnetlink device, which triggers a null pointer dereference. This...

DEBIAN-CVE-2026-73199

A flaw was found in the ipa-enrollment SLAPI plugin. A remote authenticated client can exploit a null pointer dereference vulnerability by sending a malformed Lightweight Directory Access Protocol LDAP extended operation. By omitting the request value for the JOINOID in the ipa-enrollment extende...

CVE-2026-73199

A flaw was found in the ipa-enrollment SLAPI plugin. A remote authenticated client can exploit a null pointer dereference vulnerability by sending a malformed Lightweight Directory Access Protocol LDAP extended operation. By omitting the request value for the JOINOID in the ipa-enrollment extende...