CVE-2026-86141

xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in x...

UBUNTU-CVE-2026-86141

xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in x...

POC-CVE-2024-12227

CVE-2024-12227 - NTIOLibX64.sys DoS PoC MSI Dragon Center 的 NTIOLibX64.sys 驱动程序中 CVE-2024-12227（空指针解引用漏洞）的概念验证。 描述 NTIOLibX64.sys 版本 3.0.0.10 在 ReadPhysicalMemory 函数（IOCTL 0xC3506104）中存在空指针解引用漏洞。该驱动在调用 MmUnmapIoSpace 之前未检查 MmMapIoSpace 的返回值。如果 MmMapIoSpace 返回 NULL，则使用 NULL 指针调用 MmUnmapIoSpace...

CVE-2025-68325

CVE-2025-68325 schcake no contempla el caso en que cakeenqueue devuelve un resultado no nulo, lo que provoca un desequilibrio de qlen en el árbol de qdisc y desencadena una desreferencia nula en su planificador sched padre, p. ej., qfq. Versiones Afectadas Corregido en v6.19-rc1 Gravedad Baja...

CVE-2021-26690---Apache-mod_session

Patch diffing for CVE-2021-26690 - Apache modsession This vulnerability is a NULL pointer dereference within the modsession Apache's module. It will cause a denial of service for the child processes of Apache's httpd. By using a repetitive loop, each Apache workers will crash, leading to a denial...

google-poc

To reporoduce the CVE-2025-13425 just follow the steps below: Step 1: Clone the fresh osv-scalibr source code: root@kitploit: $ git clone https://github.com/google/osv-scalibr Step 2: Remove the code mentioned in fix commit...

CVE-2026-67184-Unauthenticated-NULL-Pointer-Dereference-Crashes-the-Server-TinyWeb-

安全公告：未经身份验证的 NULL 指针解引用导致服务器崩溃（TinyWeb） 分配的 CVE ID： CVE-2026-67184 摘要 当 TinyWeb 解析请求行失败时，它会返回错误，但请求的 URL 指针仍保持为 NULL。调用方忽略了该错误，并将请求传递给响应构建器，后者解引用了这个 NULL 指针并导致工作进程崩溃。少数格式错误的请求即可使整个服务器宕机，且无法恢复。 受影响软件 项目：TinyWeb https://github.com/GeneralSandman/TinyWeb 构建所报告的版本：TnyWeb/0.0.8...

CVE-2026-86141

xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking...

AZL-99708 CVE-2026-86141 affecting package libxml2 2.11.5-10

xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking...

CVE-2026-86141

xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking...

CVE-2026-86141

xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking...

EUVD-2026-71834

xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking...

CVE-2026-86141

xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking...

CVE-2026-86141

libxml2 versions before 2.15.4 contain a NULL pointer dereference in the xmlregexp module, specifically in the xmlRegNewParserCtxt function. The root cause is a missing string length calculation after a strdup failure and NULL check, leading to a potential crash. The CVSS 3.1 score is 2.9 (Low) w...

EUVD-2026-71790

PX4 Autopilot through 1.17.0 contains a null pointer dereference vulnerability in paramsetdefaultfile and paramsetbackupfile functions that allows attackers to crash the autopilot process. Attackers can invoke 'param select' or 'param select-backup' commands with no path argument from any PX4 she...

SUSE CVE-2026-80813

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix NULL pointer dereference in nvmetexecuteidentifynslist When a host issues an Identify command with CNS 07h Active Namespace ID List for a specific I/O Command Set, nvmetexecuteidentifynslist is called with matchcss set...

SUSE CVE-2026-80846

In the Linux kernel, the following vulnerability has been resolved: xfrm: drop ESP-in-TCP packets with no ingress device ESP-in-TCP receives records through the TCP strparser. handleesp restores skb-dev from the saved skbiif before passing the packet into the XFRM input path. Queued TCP data can ...

SUSE CVE-2026-80912

In the Linux kernel, the following vulnerability has been resolved: selinux: reject an unclaimed class value in securitygetclasses securitygetclasses sizes an array by pclasses.nprim and fills it at value - 1, so a class value the policy never defines leaves a NULL. selmakeclasses passes every...

SUSE CVE-2026-80913

In the Linux kernel, the following vulnerability has been resolved: selinux: require every boolean value to be defined pbools.nprim comes from the policy image independently of how many booleans follow it, and condindexbool fills boolvaltostruct at value - 1, so a count larger than the values...

PT-2026-86302

xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking...