gstreamer1-plugins-base: gstreamer: NULL/invalid-pointer dereference in gst_rtsp_message_parse_auth_credentials() when parsing a crafted Digest Authorization/WWW-Authenticate header

A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length...

CVE-2019-19203

CVE-2019-19203 Se descubrió un problema en Oniguruma 6.x anterior a 6.9.4rc2. En la función gb18030mbcenclen del archivo gb18030.c, se desreferencia un puntero UChar sin verificar si ha pasado el final de la cadena coincidente. Esto provoca una lectura excesiva del búfer basada en heap...

CVE-2026-90782-s2opc-status-clobber

CVE-2026-90782 — Desreferencia NULL por sobrescritura de estado en S2OPC Prueba de concepto independiente para CVE-2026-90782 en S2OPC Safe & Secure OPC. Vulnerabilidad En allocnotificationmessageitems S2OPC 1.7.3 y anteriores: Se utiliza una única variable status compartida tanto para las...

BIT-ENVOY-GATEWAY-2026-53719 Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, translateSecurityPolicyForRoute in internal/gatewayapi/securitypolicy.go dereferences a nil authorization value when a namespace-scoped tenant create...

K000163351: Linux kernel vulnerabilities CVE-2026-45852 and CVE-2026-53391

Security Advisory Description CVE-2026-45852 In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix double free in rxesrqfrominit In rxesrqfrominit, the queue pointer 'q' is assigned to 'srq-rq.queue' before copying the SRQ number to user space. If copytouser fails, the...

SUSE-SU-2026:23313-1 Security update for liboqs

This update for liboqs fixes the following issues: Changes in liboqs: Updated to 0.16.0: Deprecation notice: - SPHINCS+ was removed in 0.16.0. Security issues: - Fixed uninitialized encapsderand pointer dereference - CVE-2026-46344, CVE-2026-44518: Fixed out-of-bounds read in XMSS/XMSS^MT signatu...

SUSE SLES12 Security Update : libusb-1_0 (SUSE-SU-2026:4080-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4080-1 advisory. This update for libusb-10 fixes the following issue: - CVE-2026-23679: NULL pointer dereference in parseinterface allows attackers to crash...

CVE-2026-48521: NULL Pointer Dereference

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's ProdClusterManagerFactory::allocateConnPool dereferences transportsocketoptions while selecting an HTTP/3 connection pool without first checking whether the...

ALSA-2026:69100 Important: gstreamer1-plugins-base security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins. Security Fixes: gstreamer: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow...

ROS-20260921-73-0053

The vulnerability in the net/bridge/brstp.c component of the Linux operating system is related to the dereferencing of a pointer whose validity has expired. Exploiting this vulnerability can allow an attacker to trigger a service failure...

CVE-2026-94403: Untrusted Pointer Dereference

A weakness has been identified in ColorFul iGameCenter 1.0.3.4. This impacts the function sub140001AF0 in the library ene.sys of the component IOCTL Handler. This manipulation causes untrusted pointer dereference. The attack can only be executed locally. The exploit has been made available to the...

Linux Distros Unpatched Vulnerability : CVE-2026-93588

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a NULL pointer dereference in the PNM coder. When the coder reaches a memory resource limit at a...

SUSE SLED15 / SLES15 Security Update : libusb-1_0 (SUSE-SU-2026:4050-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4050-1 advisory. This update for libusb-10 fixes the following issue: - CVE-2026-23679: NULL pointer dereference in parseinterface allow...

Important: gstreamer1-plugins-base security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins. Security Fixes: gstreamer: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow...

CVE-2019-19203

CVE-2019-19203 Se descubrió un problema en Oniguruma 6.x anterior a 6.9.4rc2. En la función gb18030mbcenclen del archivo gb18030.c, se desreferencia un puntero UChar sin comprobar si pasó el final de la cadena coincidente. Esto conduce a una sobrelectura de búfer basada en montón. Investigador:...

POC-CVE-2024-12227

CVE-2024-12227 - PoC de DoS para NTIOLibX64.sys Prueba de concepto para CVE-2024-12227 - Vulnerabilidad de desreferencia de puntero nulo en el controlador NTIOLibX64.sys de MSI Dragon Center. Descripción NTIOLibX64.sys versión 3.0.0.10 contiene una vulnerabilidad de desreferencia de puntero nulo ...

CVE-2025-68325

CVE-2025-68325 schcake no contempla el caso en que cakeenqueue devuelve un resultado no nulo, lo que provoca un desequilibrio de qlen en el árbol de qdisc y desencadena una desreferencia nula en su planificador sched padre, p. ej., qfq. Versiones Afectadas Corregido en v6.19-rc1 Gravedad Baja...

SIOCtl

SIOCtl Despachador simple de IOCTL Este es un "despachador" genérico de IOCTL. Lo hice para usarlo como POC para CVE 2018-8060 y 2018-8061, pero se puede usar con cualquier dispositivo, IOCTL y datos, no obstante. Los datos de entrada son un archivo binario que contiene datos sin procesar para...

CVE-2021-26690---Apache-mod_session

对 CVE-2021-26690 的补丁差异分析 - Apache modsession 此漏洞是 Apache 的 modsession 模块中的空指针解引用。 它将导致 Apache httpd 的子进程拒绝服务。 通过使用重复循环，每个 Apache worker 都会崩溃，从而导致所有连接或已连接到该网站的客户端拒绝服务。 该漏洞最初由 @antonio-morales 发现。 有关完整过程，请参阅本仓库中的 PDF。 限制 如果服务器通过 modsessioncrypto 实现了 SessionCryptoPassphrase 选项，则 cookie 将被加密并进行 base6...

OESA-2026-3994 389-ds-base security update

389-ds-base is an LDAPv3 compliant server which includes the LDAP server and command line utilities for server administration. Security Fixes: A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an...