cve-2021-3449

Exploit DoS de OpenSSL Este problema fue reportado a OpenSSL el 17 de marzo de 2021 por Nokia. La corrección fue desarrollada por Peter Kästle y Samuel Sapalski de Nokia. Mitigación...

openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

A flaw was found in OpenSSL. A remote attacker could exploit this vulnerability by sending a specially crafted Cryptographic Message Syntax CMS EnvelopedData message. During the processing of a KeyTransportRecipientInfo with RSA-OAEP encryption, the system attempts to access an optional parameter...

FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests

A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions...

CVE-2023-3338-DECPwn

DECPwn Practicando diferentes técnicas de explotación del kernel de Linux con mi vulnerabilidad DECnet y el mapeo de página nula habilitado. Escenarios Todo deshabilitado : qemu-system-x8664 -append "nosmap nosmep nopti nokaslr" La ejecución de código se redirige a la función output en el espacio...

FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests

A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions...

FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests

A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions...

CVE-2026-93796

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: null RX pointers after free When iwlpcietxinit fails after RX init, nic init unwinds via iwlpcierxfree. The freed RX members stayed non-NULL on the live transport object, so later teardown or retry could touc...

EUVD-2026-86314

libde265 commit 4d45a6b contains a NULL pointer dereference vulnerability in the NAL parsing path. When de265pushNAL is called with a zero-length NAL unit, the resulting NALunit may retain a NULL backing buffer, which is subsequently passed as the destination argument to memcpy in NALunit::setdat...

CVE-2026-97513

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Release m2mctx after Instance Removed from List Possible use after free if IRQ thread manages to obtain spinlock between m2mctx release and wave5release function removing stream instance from list of...

EUVD-2026-86273

OpenEXR 3.4.14 contains a NULL Pointer Dereference in the C++ attribute parsing path. A specially crafted EXR file containing an unknown-type attribute with dataSize set to zero causes the parser to create an opaque attribute with a NULL packeddata pointer. The OpaqueAttribute constructor passes...

CVE-2026-88384

The OpenEXR 3.4.14 library contains a NULL Pointer Dereference within its C++ attribute parsing path. The vulnerability occurs when a specially crafted EXR file contains an unknown-type attribute where the dataSize is set to zero. This causes the parser to create an opaque attribute with a NULL p...

CVE-2026-88384

OpenEXR 3.4.14 contains a NULL Pointer Dereference in the C++ attribute parsing path. A specially crafted EXR file containing an unknown-type attribute with dataSize set to zero causes the parser to create an opaque attribute with a NULL packeddata pointer. The OpaqueAttribute constructor passes...

CVE-2026-88373

The libde265 library (commit 4d45a6b) contains a NULL pointer dereference vulnerability within the NAL parsing path . Specifically, when de265_push_NAL() is called with a zero-length NAL unit, it can produce a NAL_unit with a NULL backing buffer. This NULL buffer is subsequently passed as a desti...

CVE-2024-36424

CVE-2024-36424 This vulnerability was discovered and disclosed by M. Akil Gündoğan from Secunnix Vulnerability Research Team. This repository will hold the proof-of concept and advisories. Details: Product: K7 Ultimate Security Affected versions: v17.0.2019 CVE ID: CVE-2024-36424 Operating System...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

kernel: Linux kernel: libceph null pointer dereference leads to denial of service

A flaw was found in libceph, a component of the Linux kernel. When processing a malformed CRUSH map, if a parent bucket's name exists but its type is missing, a null pointer dereference can occur. This issue can lead to a system crash, resulting in a Denial of Service DoS...

IOFireWireFamily-null-deref

IOFireWireFamily-null-deref IOFireWireFamily-null-deref 是 CVE-2017-2388 的概念验证漏洞利用程序，这是一个 IOFireWireUserClient 中的空指针解引用漏洞，已在 macOS Sierra 10.12.4 中修复。该漏洞可被触发，导致带有 FireWire 端口的设备发生拒绝服务。 CVE-2017-2388 函数 IOFireWireUserClient::setAsyncRefIsochChannelForceStop 在将参数 inAsyncRef 作为源调用 bcopy 之前，未检查...

CVE-2015-8543_for_SLE12SP1

root@kitploit: $cat /etc/-release PRETTYNAME="SUSE Linux Enterprise Server 12 SP1" root@kitploit: $id uid=1000jeremysp1 gid=100users groups=100users root@kitploit: $sudo sh disablesecurity.sh $gcc exp.c -o exp 2/dev/null $../nsjail/nsjail -Mo --user 0 --group 0 --keepcaps --chroot / -- /bin/sh -i...

CVE-2026-19888

A flaw was found in PgBouncer. Missing validation of a mandatory attribute in the SCRAM client-final-message parser allows an unauthenticated remote attacker to crash the process. By sending a malformed message, the parser can report success while a required value remains unset, leading to a NULL...

CVE-2026-19888

Missing validation of a mandatory attribute in the SCRAM client-final-message parser in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to crash the process. A malformed message can make the parser report success while leaving a required value unset, which is then dereferenced ...