CVE-2026-21250

CVE-2026-21250: Windows HTTP.sys Local Privilege Escalation Windows 11 24H2 - Local Privilege Escalation 🚨 Technical analysis and resources for vulnerability CVE-2026-21250 Windows 11 24H2 / 25H2 - Windows Server 2022/2025 This repository contains technical documentation and resources for studyin...

CVE-2026-90484

A null pointer dereference exists in the Apache bRPC MySQL client response parser. When a server peer sends a zero-payload-length response packet , the brpc::policy::MysqlReply::ConsumePartialIOBuf function performs an unbounded 5-byte fetch that returns nullptr. The application subsequently atte...

CVE-2026-82953

Apache bRPC (versions _onfail_id, leading to a Remote Denial of Service (DoS) . To remediate this, users should upgrade to bRPC version 1.18.0 or apply the official patch provided via the associated pull request.

DEBIAN-CVE-2025-52290

A NULL pointer dereference in the avprivh264hasnumreorderframes function of Ffmpeg version N-119856-gbe46370941 allows attackers to cause a Denial of Service DoS via processing a crafted media file...

CVE-2026-98616

A flaw was found in the Linux kernel's fbnic driver. This flaw allows a local user to trigger a kernel crash, resulting in a Denial of Service DoS. During power management suspend or failed resume operations, the driver frees interrupt vectors without clearing the active vector counter. When the...

CVE-2026-105923

The VectorImage QML Type is vulnerable to a null-pointer dereference caused by an integer overflow . This issue can be triggered by processing a malicious SVG file, which leads to an impact on availability . No specific exploit details or remediation versions are provided in the documents.

EUVD-2026-107159

A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type...

CVE-2026-108518

A flaw was found in the perl-dbi package. A type confusion vulnerability in the profiling feature can lead to an invalid memory dereference, causing the application to crash and resulting in a Denial of Service DoS. A user or attacker capable of supplying profiling configuration, such as through...

ioctlance

IOCTLance Description Presented at CODE BLUE 2023, this project titled Enhanced Vulnerability Hunting in WDM Drivers with Symbolic Execution and Taint Analysis introduces IOCTLance, a tool that enhances its capacity to detect various vulnerability types in Windows Driver Model WDM drivers. In a...

CVE-2026-114046

FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend that accepts a null per-reader name in SCardGetStatusChange requests. A malicious RDP server can send a crafted reader-state entry with a null szReader, causing strcmp or wcscmp to crash the client...

cve-2021-3449

CVE-2021-3449 OpenSSL This issue was reported to OpenSSL on 17th March 2021 by Nokia. The fix was developed by Peter Kästle and Samuel Sapalski from Nokia. Mitigation The only known fix is to update libssl1.1. Even though some applications use hardened TLS configurations by default that disable T...

CVE-2026-114046

FreeRDP versions 3.0.0 before 3.32.0 are vulnerable to a null-pointer dereference within the smartcard emulation backend. The issue occurs when the backend accepts a null per-reader name during SCardGetStatusChange requests. A malicious RDP server can trigger this by sending a crafted reader-stat...

CVE-2026-114046 FreeRDP 3.0.0 before 3.32.0 null-pointer dereference via emulated smartcard

FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend that accepts a null per-reader name in SCardGetStatusChange requests. A malicious RDP server can send a crafted reader-state entry with a null szReader, causing strcmp or wcscmp to crash the client...

EUVD-2026-106997

FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend that accepts a null per-reader name in SCardGetStatusChange requests. A malicious RDP server can send a crafted reader-state entry with a null szReader, causing strcmp or wcscmp to crash the client...

SUSE CVE-2025-52290

A NULL pointer dereference in the avprivh264hasnumreorderframes function of Ffmpeg version N-119856-gbe46370941 allows attackers to cause a Denial of Service DoS via processing a crafted media file...

PT-2026-120172

FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend that accepts a null per-reader name in SCardGetStatusChange requests. A malicious RDP server can send a crafted reader-state entry with a null szReader, causing strcmp or wcscmp to crash the client...

CVE-2025-60489

A NULL pointer dereference in the dasherinserttimelineentry function /filters/dasher.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

CVE-2025-60479

The GPAC Project/MP4Box software, prior to version 2.5 , is vulnerable to a NULL pointer dereference in the StatSFVec2f function located in /scene_manager/scene_stats.c. An attacker can exploit this flaw by supplying a crafted MPEG-4 file to cause a Denial of Service (DoS) . No specific exploit l...

CVE-2026-31431

CVE-2026-31431 — From a NULL Pointer to Root: Exploiting AFALG AEAD in the Linux Kernel Bug class: Null pointer dereference → heap OOB write → credential overwrite Affected subsystem: net/alg/afalg.c Impact: Local Privilege Escalation unprivileged user → root Affected kernels: Linux 4.4 – 4.9...

practice-22-23

Project To run: ./script.sh GitHub repository - https://github.com/LaCinquette/practice-22-23 Progress 1. For vulnerability research I chose the FFmpeg project. I found a commit that met the requirements, namely: Matched the type CWE-476 - null pointer dereference 2. Created a Dockerfile in which...