CVE-2026-53398

A flaw was found in the Linux kernel's Network File System Daemon NFSD. The nfsd4decodesecinfononame function does not properly initialize a pointer sinexp before processing an incoming data stream. If the data stream is malformed or truncated, the uninitialized pointer can retain stale data from...

ROS-20260713-73-0010

The vulnerability involves access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

Oracle Linux 7 : tigervnc (ELSA-2026-22456)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-22456 advisory. - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 and CVE-2026-34352 Orabug: 39478221 - Fix CVE-2025-62229:...

The vulnerability of the tcf_ife_dump() function in the net/sched/act_ife.c module of the network/sched/control subsystem of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the tcfifedump function in the net/sched/actife.c module of the net/sched subsystem of the Linux operating system’s kernel is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

EUVD-2022-49099

Open Babel has uninitialized pointer dereference in PQS pFormat...

GHSA-8QXC-57HF-HC9J Open Babel has uninitialized pointer dereference in PQS pFormat

Summary A memory-safety vulnerability in Open Babel's PQS parser caused an uninitialized pointer dereference when reading a crafted input file. Details The flaw was in the pFormat handling of the PQS reader. A malformed input caused the parser to dereference a format pointer that had never been...

EUVD-2022-47394

Open Babel has uninitialized pointer dereference in MSI atom parser...

GHSA-JR2X-6QF6-Q5MC Open Babel has uninitialized pointer dereference in MSI atom parser

Summary A memory-safety vulnerability in Open Babel's MSI parser caused an uninitialized pointer dereference when reading a crafted input file. Details The flaw was in the atom handling of the MSI reader. A malformed record caused the parser to dereference an atom pointer that had never been...

EUVD-2022-45947

Open Babel has uninitialized pointer dereference in GRO residue parser...

GHSA-MW5R-WQ2M-397C Open Babel has uninitialized pointer dereference in GRO residue parser

Summary A memory-safety vulnerability in Open Babel's GRO parser caused an uninitialized pointer dereference when reading a crafted input file. Details The flaw was in the residue handling of the GRO reader. A malformed record caused the parser to use a residue pointer that had never been...

DEBIAN-CVE-2026-58051

libssh2 through 1.11.1 grows its publickey list with SSH2REALLOC but does not zero-initialize new entries before parsing populates them, so a parse failure reaching the cleanup path leaves libssh2publickeylistfree operating on an uninitialized entry. A malicious SSH server offering the publickey...

CVE-2026-58051

CVE-2026-58051 affects libssh2 up to version 1.11.1. The vulnerability arises because libssh2 grows its publickey list using SSH2_REALLOC but does not zero-initialize the newly allocated entries before parsing populates them. If parsing fails and the code path cleans up, libssh2_publickey_list_fr...

CVE-2026-58051 libssh2 - Free of Uninitialized Pointer in publickey List Cleanup

libssh2 through 1.11.1 grows its publickey list with SSH2REALLOC but does not zero-initialize new entries before parsing populates them, so a parse failure reaching the cleanup path leaves libssh2publickeylistfree operating on an uninitialized entry. A malicious SSH server offering the publickey...

The vulnerability of the ksz_setup() function in the drivers/net/dsa/microchip/ksz_common.c file of the DSA kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the kszsetup function in the drivers/net/dsa/microchip/kszcommon.c file of the DSA kernel of the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-53083

Name of the Vulnerable Software and Affected Versions libssh2 versions prior to 1.11.2 Description An issue exists in the public key parsing process where the software expands its public key list using SSH2 REALLOC but fails to zero-initialize new entries before they are populated. If a parse...

The vulnerability of the qmimux_rx_fixup() function in Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the qmimuxrxfixup function in Linux operating systems is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow an attacker to trigger a service failure...

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, there was a vulnerability related to dereferencing an uninitialized pointer in the JBIG decoder, due to a missing check. This vulnerability has been fixed in...

CVE-2026-47908

Dreamweaver Desktop versions 21.7 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

ROS-20260610-73-0005

The vulnerability in Thunderbird relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-47908

Dreamweaver Desktop versions 21.7 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...