Fedora 44 : librabbitmq (2026-7174ee9a91)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7174ee9a91 advisory. Version 0.16.0 - 2026-06-08 Security - Fix out-of-bounds read via undersized frames in amqphandleinput GHSA-9mmv-r8g3-qp46, 878 - Fix client crash when serve...

PT-2026-50458

Name of the Vulnerable Software and Affected Versions Autodesk Revit affected versions not specified Description A NULL Pointer Dereference occurs when the application attempts to read a memory address that is NULL, typically resulting in a crash. This issue is triggered when a maliciously crafte...

CVE-2026-8050: Undefined Security Weakness

In SignalRGB versions prior to 1.3.7.0, seven of the thirteen IOCTL handlers dereference the SystemBuffer pointer without first verifying that it is non-NULL. Sending an IOCTL with an empty input buffer causes a NULL pointer dereference, resulting in a kernel crash...

CVE-2026-1288: NULL Pointer Dereference

A maliciously crafted RFA file, when converted to FormIt via “Convert RFA to FormIt” in Autodesk Revit, can force a NULL Pointer Dereference vulnerability. Successful exploitation may cause the application to crash, leading to a denial-of-service condition...

SignalRGB kernel driver contains improper access control and IOCTL vulnerabilities

Overview The SignalRGB kernel driver, SignalIo.sys, contains two vulnerabilities involving improper access control and unsafe memory handling. The device object is created with an overly permissive Discretionary Access Control List DACL that allows user-mode processes to access privileged hardwar...

Hitachi Energy RTU500 NULL Pointer Dereference (CVE-2026-32778)

libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier out-of-memory condition, causing Denial of Service impact. Product is only affected if IEC 61850 functionality is configured. This plugin only works with Tenable.ot. Please visit...

IBM WebSphere Application Server 8.5.x < 8.5.5.30 / 9.x < 9.0.5.28 RCE (7276560)

The version of IBM WebSphere Application Server running on the remote host is affected by a remote code execution vulnerability as referenced in the 7276560 advisory. - IBM WebSphere Application Server and IBM WebSphere Application Server Liberty, when using Intelligent Management with the...

Hitachi Energy RTU500 NULL Pointer Dereference (CVE-2026-32776)

libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content, causing Denial of Service impact. Product is only affected if IEC 61850 functionality is configured. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-...

CVE-2026-10637

subsys/net/ip/ipv6mld.c:mldsend read the packet interface via netpktifacepkt after netsenddatapkt returned successfully. Per the network stack's ownership contract include/zephyr/net/netcore.h, and the explicit warning in subsys/net/ip/netcore.c:453-460 'do not use pkt after that call', a...

CLSA-2026-1781619738 Fix CVE(s): CVE-2026-45358, CVE-2026-49218, CVE-2026-53463

SECURITY UPDATE: off-by-one out-of-bounds read in the meta 8BIM/IPTC decoder - debian/patches/CVE-2026-45358.patch: bound taglength against the remaining extent in GetIPTCStream in coders/meta.c - CVE-2026-45358 SECURITY UPDATE: missing dimension check in the DCM decoder -...

CLSA-2026-1781606406 Fix CVE(s): CVE-2026-45358, CVE-2026-49218, CVE-2026-53463

SECURITY UPDATE: off-by-one out-of-bounds read in the meta 8BIM/IPTC decoder - debian/patches/CVE-2026-45358.patch: bound taglength against the remaining extent in GetIPTCStream in coders/meta.c - CVE-2026-45358 SECURITY UPDATE: missing dimension check in the DCM decoder -...

CLSA-2026-1781606042 ImageMagick: Fix of 9 CVEs

CVE-2026-45358: off-by-one out-of-bounds read in the meta 8BIM/IPTC encoder - CVE-2026-46559: heap buffer over-write of a single byte in the JP2 encoder - CVE-2026-49218: missing dimension check in the DCM decoder zero rows/columns - CVE-2026-53461: heap buffer over-write in the ICON decoder due...

CLSA-2026-1781606022 ImageMagick: Fix of 9 CVEs

CVE-2026-45358: off-by-one out-of-bounds read in the meta 8BIM/IPTC encoder - CVE-2026-46559: heap buffer over-write of a single byte in the JP2 encoder - CVE-2026-49218: missing dimension check in the DCM decoder zero rows/columns - CVE-2026-53461: heap buffer over-write in the ICON decoder due...

CLSA-2026-1781605653 ImageMagick: Fix of 9 CVEs

CVE-2026-45358: off-by-one out-of-bounds read in the meta 8BIM/IPTC encoder - CVE-2026-46559: heap buffer over-write of a single byte in the JP2 encoder - CVE-2026-49218: missing dimension check in the DCM decoder zero rows/columns - CVE-2026-53461: heap buffer over-write in the ICON decoder due...

CLSA-2026-1781605589 ImageMagick: Fix of 9 CVEs

CVE-2026-45358: off-by-one out-of-bounds read in the meta 8BIM/IPTC encoder - CVE-2026-46559: heap buffer over-write of a single byte in the JP2 encoder - CVE-2026-49218: missing dimension check in the DCM decoder zero rows/columns - CVE-2026-53461: heap buffer over-write in the ICON decoder due...

CVE-2026-0156: NULL Pointer Dereference

In checkSsrcCollisionOnRcv of RtpSession.cpp, there is a possible memory safety issue due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-109459

Уязвимость функции hpack dht insert файла src/hpack-tbl.c серверного программного обеспечения HAProxy связана с разыменованием нулевого указателя. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

EUVD-2025-210141

A NULL pointer dereference in the gfisomcopysampleinfo function isomedia/isomwrite.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

EUVD-2025-210148

A NULL pointer dereference in the gfmediamapesd function mediatools/isomtools.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

CVE-2025-70102

A NULL pointer dereference occurs in Roy Marples NetworkConfiguration/dhcpcd 10.3.0 while parsing configuration options. In parseoption src/if-options.c:1886, the code performs a member access on a NULL pointer of type 'struct dhcpopt' when an unexpected/invalid option token or parsing state caus...