OESA-2026-3552 unrtf security update

UnRTF is a command-line program written in C which converts documents in Rich Text Format .rtf to HTML, LaTeX, troff macros, and RTF itself. Converting to HTML, it supports a number of features of Rich Text Format: Changes in the text's font, size, weight bold, and slant italic Underlines and...

OESA-2026-3551 unrtf security update

UnRTF is a command-line program written in C which converts documents in Rich Text Format .rtf to HTML, LaTeX, troff macros, and RTF itself. Converting to HTML, it supports a number of features of Rich Text Format: Changes in the text's font, size, weight bold, and slant italic Underlines and...

OESA-2026-3550 unrtf security update

UnRTF is a command-line program written in C which converts documents in Rich Text Format .rtf to HTML, LaTeX, troff macros, and RTF itself. Converting to HTML, it supports a number of features of Rich Text Format: Changes in the text's font, size, weight bold, and slant italic Underlines and...

OESA-2026-3525 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: A vulnerability was found in Artifex GhostPDL up to 3989415a5b8e99b9d1b87cc9902bde9b7cdea145. It has been classifie...

OESA-2026-3495 sqlite security update

SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications...

OESA-2026-3494 sqlite security update

SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications...

OESA-2026-3493 sqlite security update

SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications...

OESA-2026-3492 sqlite security update

SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications...

PT-2026-83635

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.8.0 Description A remote null pointer dereference can occur due to improper processing within the src/amf/namf-handler.c file of the Transfer Endpoint component. A null pointer dereference happens when a program...

Security update for mozjs102 (moderate)

openSUSE Security Update: Security update for mozjs102 Announcement ID: openSUSE-SU-2026:0315-1 Rating: moderate References: 1259713 1259728 1259731 Cross-References: CVE-2026-32776 CVE-2026-32777 CVE-2026-32778 CVSS scores: CVE-2026-32776 SUSE: 8.7...

Drishti: AI-Led Human-Directed Vulnerability Auditing for 5G Cores

Candidate generation for open-source vulnerabilities is no longer scarce. AI-assisted code review now produces defect candidates cheaply, and industry programs pair them with expert human triage. The remaining scarcity is validation and impact assessment, and the gap is largest in...

CVE-2026-82588: NULL Pointer Dereference

A vulnerability was identified in Open5GS up to 2.7.7. This issue affects some unknown processing of the file src/amf/namf-handler.c of the component Transfer Endpoint. Such manipulation leads to null pointer dereference. The attack can be launched remotely. Upgrading to version 2.8.0 is capable ...

CLSA-2026-1787999580 openssl: Fix of 2 CVEs

CVE-2026-42766: fix NULL pointer dereference during password-based CMS decryption when the optional keyDerivationAlgorithm field is absent - CVE-2026-34180: fix heap buffer over-read caused by integer truncation of ASN.1 primitive content lengths above 2 GB on 64-bit platforms...

EUVD-2026-67936

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP state variable query requests. A specially crafted SOAP query may trigger unexpected termination or instability of the process hosting the UPnP service. Successful exploitation may result in ...

EUVD-2026-67935

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP action requests. A specially crafted SOAP action request containing unexpected XML content may cause the UPnP daemon to terminate unexpectedly. Successful exploitation may result in a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-002303)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002303 advisory. In the Linux kernel, the following vulnerability has been resolved: Revert tty: ngsm: fix UAF in gsmcleanupmux This reverts commit...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2024-002938)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-002938 advisory. In the Linux kernel, the following vulnerability has been resolved: mfd: syscon: Fix null pointer dereference in ofsysconregister kasprintf returns a pointer to...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2024-002974)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-002974 advisory. A null pointer dereference flaw was found in the hugetlbfsfillsuper function in the Linux kernel hugetlbfs HugeTLB pages functionality. This issue may allow a local...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2024-002968)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-002968 advisory. A race condition was found in the Linux kernel's sound/hda device driver in sndhdacregmapsync function. This can result in a null pointer dereference issue, possibly...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-002709)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002709 advisory. In the Linux kernel, the following vulnerability has been resolved: gtp: fix a potential NULL pointer dereference When sockfdlookup fails, gtpencapenablesocket retur...