firefox: Privilege escalation due to invalid pointer in the Graphics component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to invalid pointer in the Graphics component...

CVE-2024-26475

CVE-2024-26475 Authors Sherlock Fang, Vlad Tronciu, Ayam Babu Description An issue in radareorg radare2 v.0.9.7 through v.5.8.6 and fixed in v.5.8.8 allows a local attacker to cause a denial of service via the grubsfsreadextent function. Attack Vectors Crafting a payload to cause “treeblock =...

ROS-20261012-73-0017

The vulnerability of the qcom/qdsp6 component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261012-73-0084

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261012-73-0038

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261012-73-0174

The vulnerability of the apparmor module in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261012-73-0076

The vulnerability of the unsharefs function in the kernel/fork.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-109272: NULL Pointer Dereference

ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted PostScript file for processing to crash the application, causing a denial of service...

CVE-2026-109252: NULL Pointer Dereference

FreeRDP from 3.9.0 before 3.32.0 contains a NULL pointer dereference vulnerability in the RDPEAR NDR reader that allows malicious servers to crash clients via truncated KERBRPCINTERNALNAME data. Attackers can send a CreateApReqAuthenticatorReq with NameCount of two or more ending before the Names...

CVE-2026-109241: NULL Pointer Dereference

FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the client video redirection channel that allows malicious servers to crash clients by sending out-of-order messages. Attackers can send a Geometry CLEAR message that nulls presentation-geometry, then send VideoData that...

ROS-20261012-73-0123

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261012-73-0219

The vulnerability of the netvsccopytosendbuf function in the drivers/net/hyperv.netvsc.c file of the Linux kernel network device driver is related to errors during pointer scaling. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

ROS-20261012-73-0078

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

EulerOS 2.0 SP11 : patch (EulerOS-SA-2026-4266)

According to the versions of the patch packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of consecutive...

Linux net/ipv6/route.c Heap Buffer Overflow DoS

The vulnerability of the ip6defaultadvmss function in the net/ipv6/route.c component of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

EulerOS 2.0 SP11 : haproxy (EulerOS-SA-2026-4235)

According to the versions of the haproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgiconn structure's drl field that allows buff...

TencentOS Server 3: gstreamer1-plugins-base (TSSA-2026:1121)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1121 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Rocky Linux 9.6 [TuxCare] Security Update: krb5-devel / krb5-libs / krb5-pkinit / krb5-server / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791811122)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791811122 advisory. - MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's getpacprincwithrealm that returns success...

EulerOS 2.0 SP13 : patch (EulerOS-SA-2026-4080)

According to the versions of the patch packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of consecutive...

EulerOS 2.0 SP13 : libusbx (EulerOS-SA-2026-4067)

According to the versions of the libusbx packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malform...