110332 matches found
CVE-2026-107170
A flaw was found in m17n-lib. A partial failure during library initialization can leave an internal driver pointer uninitialized. Under specific error conditions, such as system resource exhaustion or database corruption, an application attempting to open an input method dereferences this null...
UBUNTU-CVE-2026-107170
A flaw was found in m17n-lib. A partial failure during library initialization can leave an internal driver pointer uninitialized. Under specific error conditions, such as system resource exhaustion or database corruption, an application attempting to open an input method dereferences this null...
USN-8894-1: poppler vulnerabilities
It was discovered that Poppler had an integer overflow in FoFiTrueType::cvtSfnts. An attacker could possibly use this issue to cause Poppler to crash, resulting in a denial of service, or execute arbitrary code. CVE-2026-102620 It was discovered that Poppler had an integer overflow in...
nginx: Fix of 5 CVEs
CVE-2026-27651: properly clear s-passwd in mail auth http requests to fix a null pointer dereference on CRAM-MD5/APOP retry - CVE-2026-27654: validate the Destination length for Dav COPY and MOVE to prevent an integer underflow and heap buffer overwrite when alias is used - CVE-2026-27654: also...
EUVD-2026-94315
A flaw was found in m17n-lib. A partial failure during library initialization can leave an internal driver pointer uninitialized. Under specific error conditions, such as system resource exhaustion or database corruption, an application attempting to open an input method dereferences this null...
CVE-2026-107170
A flaw in m17n-lib allows for a null pointer dereference within the minput_open_im() function. This occurs when a partial failure during library initialization—triggered by conditions like system resource exhaustion or database corruption —leaves an internal driver pointer uninitialized. When an ...
CVE-2026-107170
A flaw was found in m17n-lib. A partial failure during library initialization can leave an internal driver pointer uninitialized. Under specific error conditions, such as system resource exhaustion or database corruption, an application attempting to open an input method dereferences this null...
LSN-0122-1 Kernel Live Patch Security Notice
In the Linux kernel, the following vulnerability has been resolved: fs: dlm: fix use after free in midcomms commit While working on processing dlm message in softirq context I experienced the following KASAN use-after-free warning: . In the Linux kernel, the following vulnerability has been...
LSN-0122-1: Kernel Live Patch Security Notice
In the Linux kernel, the following vulnerability has been resolved: fs: dlm: fix use after free in midcomms commit While working on processing dlm message in softirq context I experienced the following KASAN use-after-free warning: . In the Linux kernel, the following vulnerability has been...
CVE-2026-78148
A flaw was found in the ggml-RPC Server component of llama.cpp. A remote attacker can exploit this vulnerability by performing a specific manipulation, leading to a null pointer dereference. This can result in a Denial of Service DoS, making the affected system unavailable. Mitigation For systems...
CVE-2026-98358
A flaw was found in the Linux kernel's iSCSI Extensions for Remote Direct Memory Access iSER driver. A remote storage target can trigger a Denial of Service DoS by sending an unexpected remote invalidation response for write operations transmitted as immediate data. In this scenario, the initiato...
CVE-2026-98356
A flaw was found in the Linux kernel's Broadcom NetXtreme bnxtre driver. During device initialization, the driver fails to verify that memory allocation for the Data Center Bridging DCB workqueue succeeded. Under low-memory conditions where this setup fails, a subsequent asynchronous DCB...
CVE-2026-98355
A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access subsystem. When connection path initialization fails in the RDMA Transport RTRS driver, error cleanup routines invoke event tracing before the associated object name is set. This issue leads to a null pointer dereference,...
SUSE CVE-2026-98220
In the Linux kernel, the following vulnerability has been resolved: schedext: Fix NULL sched deref in kfunc sub-sched error paths When the root scheduler has sub-scheds attached, the COMPAT kfunc wrappers scxbpfselectcpuand and scxbpfdsqinsertvtime refuse the call and report to @p's scheduler:...
SUSE CVE-2026-98314
In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: set timer-privatedata before registering the PCM timer sndpcmtimerinit calls snddeviceregister to link the new struct sndtimer into the global timer list while it still carries hw.cresolution = sndpcmtimerresolution an...
SUSE CVE-2026-98355
In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: guard against null kobj name In the client, if initpath errors, the callee tries to clean up with rtrscltcloseconns. However, this can lead to calling the event tracing code with cltpath-kobj-name being NULL and thus...
CVE-2026-107169: NULL Pointer Dereference
A flaw was found in m17n-lib. An attacker could provide specially crafted or truncated UTF-8 input to trigger an unhandled null pointer dereference during text processing. This issue causes the application to crash unexpectedly, resulting in a Denial of Service DoS...
Failover Cluster Code Execution
The vulnerability of the Failover Cluster component for Windows operating systems is related to the swapping of an unreliable pointer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...