CVE-2026-42542 TDengine has an integer underflow in uvConnMayGetUserInfo() allows unauthenticated remote crash (DoS)

TDengine is an open source, time-series database optimized for Internet of Things devices. In versions 3.4.0.0 through 3.4.1.5, an unauthenticated remote attacker can crash the taosd server process by sending a single crafted RPC packet. No credentials or prior session state are required. Version...

PT-2026-48533

Name of the Vulnerable Software and Affected Versions TDengine versions 3.4.0.0 through 3.4.1.5 Description An unauthenticated remote attacker can cause the taosd server process to crash by sending a single crafted RPC Remote Procedure Call packet. This action does not require any credentials or ...

CVE-2025-32402

An Out-of-bounds Write in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious RPC packet...

Code injection

1 caloggerd.exe camt70.dll and 2 mediasvr.exe catirpc.dll and rwxdr.dll in CA BrightStor Backup 11.5.2.0 SP2 allow remote attackers to cause a denial of service NULL dereference and application crash via a crafted RPC packet...

CVE-2007-2772

CA BrightStor ARCserve Backup 11.5.2.0 SP2 is affected: caloggerd.exe (camt70.dll) and mediasvr.exe (catirpc.dll, rwxdr.dll) can be remotely triggered to crash via crafted RPC packets, due to a NULL dereference stemming from insufficient data validation in RPC request parsing. The CA advisory CPA...