112177 matches found
EulerOS 2.0 SP13 : libusbx (EulerOS-SA-2026-4158)
According to the versions of the libusbx packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malform...
EulerOS 2.0 SP11 : haproxy (EulerOS-SA-2026-4235)
According to the versions of the haproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgiconn structure's drl field that allows buff...
AlmaLinux 9.2 [TuxCare] Security Update: python-unversioned-command / python3 / python3-debug / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1791820273)
The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791820273 advisory. - A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its snicallback assigns a differen...
EulerOS 2.0 SP11 : patch (EulerOS-SA-2026-4266)
According to the versions of the patch packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of consecutive...
CentOS Linux 7 [TuxCare] Security Update: python / python-debug / python-devel / python-libs / python-test / etc (CENTOS7:CLSA-2026:1791424578)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1791424578 advisory. - A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its snicallback assigns a different context to...
EulerOS 2.0 SP11 : patch (EulerOS-SA-2026-4356)
According to the versions of the patch packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of consecutive...
EulerOS 2.0 SP13 : patch (EulerOS-SA-2026-4171)
According to the versions of the patch packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of consecutive...
EulerOS 2.0 SP13 : patch (EulerOS-SA-2026-4080)
According to the versions of the patch packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of consecutive...
EulerOS 2.0 SP13 : libusbx (EulerOS-SA-2026-4067)
According to the versions of the libusbx packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malform...
krb5: krb5: Denial of Service via malformed PAC in S4U2Proxy requests
A flaw was found in krb5. This vulnerability allows a compromised or malicious cross-realm trusted Key Distribution Center KDC to cause a Denial of Service DoS. By sending an S4U2Proxy delegation request containing a malformed client name within a Privilege Attribute Certificate PAC, an attacker...
krb5: krb5: Denial of Service via crafted forwarded credentials
A flaw was found in krb5. An authenticated remote attacker can cause a Denial of Service DoS by sending specially crafted forwarded credentials containing mismatched credential entries. This improper handling triggers a null pointer dereference, causing the service to crash and become unavailable...
CVE-2026-19737
i2sesp32triggercheck in drivers/i2s/i2sesp32.c validates the requested direction only for I2SDIRBOTH. The I2SDIRRX and I2SDIRTX branches read devcfg-rx.data-configured / devcfg-tx.data-configured without first checking the stream pointers. The device instantiation macro I2SESP32STREAMINIT sets bo...
CVE-2026-19737 NULL pointer dereference in the ESP32 I2S driver when triggering an unsupported direction
i2sesp32triggercheck in drivers/i2s/i2sesp32.c validates the requested direction only for I2SDIRBOTH. The I2SDIRRX and I2SDIRTX branches read devcfg-rx.data-configured / devcfg-tx.data-configured without first checking the stream pointers. The device instantiation macro I2SESP32STREAMINIT sets bo...
CVE-2026-19737
The ESP32 I2S driver in Zephyr RTOS contains a NULL pointer dereference vulnerability in the i2s_esp32_trigger_check() function within drivers/i2s/i2s_esp32.c. The root cause is that the driver fails to validate stream pointers for I2S_DIR_RX and I2S_DIR_TX directions, leading to a load from addr...
EUVD-2026-97105
i2sesp32triggercheck in drivers/i2s/i2sesp32.c validates the requested direction only for I2SDIRBOTH. The I2SDIRRX and I2SDIRTX branches read devcfg-rx.data-configured / devcfg-tx.data-configured without first checking the stream pointers. The device instantiation macro I2SESP32STREAMINIT sets bo...
CVE-2026-19737 NULL pointer dereference in the ESP32 I2S driver when triggering an unsupported direction
i2sesp32triggercheck in drivers/i2s/i2sesp32.c validates the requested direction only for I2SDIRBOTH. The I2SDIRRX and I2SDIRTX branches read devcfg-rx.data-configured / devcfg-tx.data-configured without first checking the stream pointers. The device instantiation macro I2SESP32STREAMINIT sets bo...
CVE-2026-19737
i2sesp32triggercheck in drivers/i2s/i2sesp32.c validates the requested direction only for I2SDIRBOTH. The I2SDIRRX and I2SDIRTX branches read devcfg-rx.data-configured / devcfg-tx.data-configured without first checking the stream pointers. The device instantiation macro I2SESP32STREAMINIT sets bo...
CVE-2026-19737 NULL pointer dereference in the ESP32 I2S driver when triggering an unsupported direction
i2sesp32triggercheck in drivers/i2s/i2sesp32.c validates the requested direction only for I2SDIRBOTH. The I2SDIRRX and I2SDIRTX branches read devcfg-rx.data-configured / devcfg-tx.data-configured without first checking the stream pointers. The device instantiation macro I2SESP32STREAMINIT sets bo...
Tai-e
Tai-e ✨Noticias Lanzamiento v0.5.4: Tai-e incluye un nuevo frontend que proporciona una conversión más rápida y confiable de programas Java a IR de Tai-e. Se admite el análisis de aplicaciones Android a través de un complemento basado en PacDroid integrado con análisis de punteros. Se admite el...
CVE-2026-92871
A flaw was found in pgpool-II. A remote, unauthenticated attacker could cause a Denial of Service DoS due to a NULL pointer dereference in the watchdog component. Exploiting this vulnerability leads to abnormal termination of the watchdog process. Mitigation Restrict network access to the pgpool-...