52097 matches found
openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing
A flaw was found in OpenSSL. A remote attacker could exploit this vulnerability by sending a specially crafted Cryptographic Message Syntax CMS EnvelopedData message. During the processing of a KeyTransportRecipientInfo with RSA-OAEP encryption, the system attempts to access an optional parameter...
PYSEC-2026-2791 Open Babel has a NULL pointer dereference in CDXML OBAtom::GetExplicitValence
Summary A memory-safety vulnerability in Open Babel's CDXML file format parser caused a NULL pointer dereference when reading a crafted input file. Details The flaw was in OBAtom::GetExplicitValence as called from the CDXML parser. A malformed fragment caused the parser to invoke the method on a...
PYSEC-2026-3287 TensorFlow has null dereference on ParallelConcat with XLA
Impact When running with XLA, tf.rawops.ParallelConcat segfaults with a nullptr dereference when given a parameter shape with rank that is not greater than zero. python import tensorflow as tf func = tf.rawops.ParallelConcat para = 'shape': 0, 'values': 1 @tf.functionjitcompile=True def test: y =...
openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing
A flaw was found in OpenSSL. A remote attacker could exploit this vulnerability by sending a specially crafted Cryptographic Message Syntax CMS EnvelopedData message. During the processing of a KeyTransportRecipientInfo with RSA-OAEP encryption, the system attempts to access an optional parameter...
openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing
A flaw was found in OpenSSL. A remote attacker could exploit this vulnerability by sending a specially crafted Cryptographic Message Syntax CMS EnvelopedData message. During the processing of a KeyTransportRecipientInfo with RSA-OAEP encryption, the system attempts to access an optional parameter...
openssl security update
1:1.1.1k-17 - Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing Resolves: RHEL-165783...
PT-2026-59410
Summary A memory-safety vulnerability in Open Babel's MOL2 file format parser caused a NULL pointer dereference when reading a crafted input file. Details The flaw was in OBAtom::SetFormalCharge as called from the MOL2 parser. A malformed atom record caused the parser to call the method on a NULL...
CVE-2026-58101: NULL Pointer Dereference
Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference. X509V3EXTd2iext returns NULL when an extension's DER value fails to parse. basicC, ia5string, and authatt dereference its result without a NULL check. keyiddata also dereferences akid-keyid,...
PT-2026-57917
Name of the Vulnerable Software and Affected Versions Crypt::OpenSSL::X509 versions prior to 2.1.3 Description A denial of service can occur due to a NULL pointer dereference. The function X509V3 EXT d2iext returns NULL when a DER Distinguished Encoding Rules value of an extension fails to parse...
PT-2026-59847
Impact When the parameter summarize of tf.raw ops.Print is zero, the new method SummarizeArray will reference to a nullptr, leading to a seg fault. python import tensorflow as tf tf.raw ops.Printinput = tf.constant1, 1, 1, 1,dtype=tf.int32, data = False, False, False, False, False, False, False,...
RHEL 8 : openssl (RHSA-2026:38805)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:38805 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...
CLSA-2026-1783859504 kernel-uek: Fix of 2 CVEs
futex/requeue: Prevent NULL pointer dereference in removewaiter on self-deadlock CVE-2026-53166 - rtmutex: Use waiter::task instead of current in removewaiter CVE-2026-43499 - ip6tunnel: clear skb2-cb in ip4ip6err CVE-2026-43037...
CLSA-2026-1783789843 Fix CVE(s): CVE-2026-43499
CVE-2026-53166 - futex/requeue: Prevent NULL pointer dereference in removewaiter on self-deadlock CVE-2026-53166 CVE-2026-43499 - rtmutex: Use waiter::task instead of current in removewaiter CVE-2026-43499 Miscellaneous upstream changes - Revert "ext4: fix warning in ext4iomapbegin as race betwee...
CLSA-2026-1783789559 kernel: Fix of CVE-2026-43499
futex/requeue: Prevent NULL pointer dereference in removewaiter on self-deadlock CVE-2026-53166 - rtmutex: Use waiter::task instead of current in removewaiter CVE-2026-43499...
CLSA-2026-1783789054 kernel: Fix of 3 CVEs
futex/requeue: Prevent NULL pointer dereference in removewaiter on self-deadlock CVE-2026-53166 - rtmutex: Use waiter::task instead of current in removewaiter CVE-2026-43499 - i40e: Fix use-after-free in i40eclientsubtask CVE-2021-46991 - ethernet:enic: Fix a use after free bug in...
patch: GNU patch: Denial of Service via specially crafted patch file
A flaw was found in GNU patch. An attacker can exploit this by providing a specially crafted patch file, which leads to a NULL pointer dereference. This improper handling of end-of-file markers can corrupt internal data structures, causing the utility to crash. This results in a denial of service...
CVE-2026-55783
NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, NanaZip's seven in-house IInArchive handlers in NanaZip.Codecs unconditionally dereference the caller-supplied Indices array inside Extract when the archive engine signals extract everything by passin...
kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock
A flaw was found in the Linux kernel's futex Fast Userspace Mutex requeue mechanism. When a non-top waiter attempts to requeue a Priority Inheritance PI futex it already owns, a NULL pointer dereference can occur. This issue, specifically within the removewaiter function during a self-deadlock...
SUSE-SU-2026:2848-1 Security update for krb5, krb5-mini
This update for krb5, krb5-mini fixes the following issues - CVE-2026-11850: integer underflow in berval2tldata leads to heap out-of-bounds read bsc1268131. - CVE-2026-40355: Denial of Service via NULL pointer dereference in NegoEx mechanism bsc1263366. - CVE-2026-40356: Denial of Service via...
