37089 matches found
CVE-2026-15690
A vulnerability was identified in open62541 up to 1.5.5. Affected by this issue is the function responseReadNamespacesArray of the file src/client/uaclientconnect.c of the component Shared Client Library. Such manipulation of the argument ServerNamespaceArray leads to null pointer dereference. Th...
CVE-2026-15690
open62541 vulnerable to a null pointer dereference in the Shared Client Library. Affected: up to 1.5.5; vulnerable function: responseReadNamespacesArray in src/client/ua_client_connect.c, with manipulation of Server_NamespaceArray leading to a NPD. Exploitation can be remote and is described as d...
kernel: net: bridge: use a stable FDB dst snapshot in RCU readers
A flaw was found in the Linux kernel. Inconsistent handling of local Forwarding Database FDB entries in the bridge networking component's RCU Read-Copy-Update readers can lead to a null-pointer dereference. A local attacker could exploit this by triggering a concurrent update to an FDB entry,...
EUVD-2026-43573
Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference. X509V3EXTd2iext returns NULL when an extension's DER value fails to parse. basicC, ia5string, and authatt dereference its result without a NULL check. keyiddata also dereferences akid-keyid,...
PT-2026-58299
Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An untrusted pointer dereference allows an unauthorized attacker to perform local information disclosure. This issue occurs when the software accesses a memory address through ...
PT-2026-58348
Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description A null pointer dereference—a condition where a program attempts to read a memory location that is null—exists in Active Directory Domain Services. This allows an...
Adobe Bridge 15.1.5 < 15.1.6 / 16.x < 16.0.4 Multiple Vulnerabilities (APSB26-81)
The version of Adobe Bridge installed on the remote Windows host is prior to 15.1.6 or 16.0.4. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb26-81 advisory. - Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution...
CVE-2025-56363
A null pointer dereference vulnerability exists in the Matter SDK connectedhomeip before 1.4.0, affecting the ReadRevisionAttribute function used in multiple clusters Channel, Account Login, TargetNavigator, etc.. The function lacks proper validation of the delegate pointer before dereferencing. ...
CVE-2025-56363
A null pointer dereference vulnerability exists in the Matter SDK connectedhomeip before 1.4.0, affecting the ReadRevisionAttribute function used in multiple clusters Channel, Account Login, TargetNavigator, etc.. The function lacks proper validation of the delegate pointer before dereferencing. ...
PT-2026-58008
A vulnerability was identified in open62541 up to 1.5.5. Affected by this issue is the function responseReadNamespacesArray of the file src/client/ua client connect.c of the component Shared Client Library. Such manipulation of the argument Server NamespaceArray leads to null pointer dereference...
PT-2026-58312
Name of the Vulnerable Software and Affected Versions Windows Image Acquisition affected versions not specified Description A null pointer dereference in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. A null pointer dereference occurs when a program attempt...
Adobe Bridge 15.1.5 < 15.1.6 / 16.x < 16.0.4 Multiple Vulnerabilities (APSB26-81)
The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 15.1.6 or 16.0.4. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb26-81 advisory. - Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code...
DEBIAN-CVE-2026-58101
Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference. X509V3EXTd2iext returns NULL when an extension's DER value fails to parse. basicC, ia5string, and authatt dereference its result without a NULL check. keyiddata also dereferences akid-keyid,...
CVE-2026-58101
CVE-2026-58101 affects Crypt::OpenSSL::X509 before 2.1.3 for Perl. The issue arises when X509V3_EXT_d2i(ext) returns NULL if an extension fails to parse, yet basicC, ia5string, and auth_att dereference the result without a NULL check, and keyid_data dereferences akid->keyid even when the AKI s...
SUSE-SU-2026:22651-1 Security update for patch
This update for patch fixes the following issues - CVE-2026-56288: crafted unified-diff patch file can cause null pointer derefence bsc1271167. - CVE-2026-56289: improper validation of hunk line offsets can lead to denial of service bsc1271166...
SUSE-SU-2026:22604-1 Security update for patch
This update for patch fixes the following issues - CVE-2026-56288: crafted unified-diff patch file can cause null pointer derefence bsc1271167. - CVE-2026-56289: improper validation of hunk line offsets can lead to denial of service bsc1271166...
OPENSUSE-SU-2026:21332-1 Security update for patch
This update for patch fixes the following issues - CVE-2026-56288: crafted unified-diff patch file can cause null pointer derefence bsc1271167. - CVE-2026-56289: improper validation of hunk line offsets can lead to denial of service bsc1271166...
sqlite: SQLite: Denial of Service via malformed changeset in Session Extension
A flaw was found in SQLite. The Session Extension in SQLite is vulnerable to a NULL pointer dereference. A remote attacker could exploit this by supplying a specially crafted, malformed changeset blob. This could lead to a denial of service, making the application unavailable to legitimate users...
SUSE-SU-2026:2922-1 Security update for patch
This update for patch fixes the following issues - CVE-2021-45261: Invalid Pointer via anotherhunk function bsc1194037. - CVE-2026-56288: crafted unified-diff patch file can cause null pointer derefence bsc1271167. - CVE-2026-56289: improper validation of hunk line offsets can lead to denial of...
openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing
A flaw was found in OpenSSL. A remote attacker could exploit this vulnerability by sending a specially crafted Cryptographic Message Syntax CMS EnvelopedData message. During the processing of a KeyTransportRecipientInfo with RSA-OAEP encryption, the system attempts to access an optional parameter...