deREferencing

deREferencing deReferencing is an IDA Pro plugin that implements new registers and stack views. Adds dereferenced pointers, colors and other useful information, similar to some GDB plugins e.g: PEDA, GEF, pwndbg, etc. Supports following architectures: x86, x86-64, ARM, ARM64, MIPS32 and MIPS64...

fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content

Summary fpdf2 implicitly dereferences image resource references supplied to rendering APIs. If an application passes untrusted HTML, SVG, template data, or image paths into those APIs, fpdf2 may issue outbound HTTPS requests or attempt to open local filesystem paths. This behavior is relevant in...

FreeRDP RDP DoS

The vulnerability of the rdgprocessclosepacket function in the FreeRDP client is related to pointer dereferencing errors. Exploiting this vulnerability could allow a remote attacker to cause service failure...

PT-2026-122478

Уязвимость микропрограммного обеспечения шлюза Cisco Expressway связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

Linux kernel signal exec Trigger DoS

The vulnerability of the exec function in the Linux kernel’s signal component is related to the pointer dereferencing when its validity period has expired. Exploiting this vulnerability can allow an attacker to trigger a service failure...

CVE-2026-110322

The PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned object pointer before dereferencing fixed fields during post-processing...

EUVD-2026-105354

The PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned object pointer before dereferencing fixed fields during post-processing...

HMS Networks PEAK-System Device Driver Setup buffer error vulnerability

Versions 5.1.2.1151 and earlier of the HMS Networks PEAK-System Device Driver, as well as PCAN Windows CAN device drivers versions 5.1.2 and earlier, contain a buffer error vulnerability. This vulnerability arises because the PCAN processing path for type 0x4030 dereferences an object pointer tha...

HarfBuzz: Improper exception handling vulnerability

The HarfBuzz version 8.0.0 to 14.6.0 has a vulnerability related to improper exception handling. This vulnerability arises from experimental WebAssembly shaper hosts that import buffersetcontents, facecreate, and fontsetcoords functions. Null pointer dereferencing occurs in these functions,...

IBM MQ Operator deserialization injection vulnerability

IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 pre-versions, 3.4.1, 3.5.0 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0, 3.9.1, 3.9.2, and 4.0.0 through 4.0.4 have a deserialization injection vulnerability. This vulnerabilit...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.10 contains security vulnerabilities. These vulnerabilities stem from the btintelpcie driver, which fails to perform boundary verification on the DMA index frbdtag and crhia provided by the device during the RX path. This may lead to out-of-bounds pointer dereferencing ...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.15 contains a security vulnerability. This vulnerability stems from the improper timing of releasing the mapping for each PHY interrupt in the .remove function of the mt7530removecommon. The regmap-irq chip uses devm for registration, and the parent interrupt is only...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities arise from the independent channel allocation path not including the maximum Tx queue size. As a result, 128 vectors are recorded, but only 64 are allocated. When resource settings are made, NULL entries are...

Gitea’s improper exception handling vulnerabilities

Gitea 28.1.0 and earlier versions have a vulnerability related to improper exception handling. This vulnerability arises when the organization’s handler processes requests from individual users with the format username/-/repositories. In such cases, the handler may dereference an empty...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.16 contains a security vulnerability. This vulnerability stems from the KVM arm64 nv module, which encounters a race condition with stage 2 teardown when handling nested wp/unmap operations. The module does not check whether pgt is empty, which may lead to null pointer...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.16 contains a security vulnerability. This vulnerability arises from the max30102 interrupt handler referencing an empty activescanmask when a buffer is not enabled, which may lead to null pointer dereferencing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.6 contains security vulnerabilities. These vulnerabilities stem from the PCI dynamic OF helper function, which dereferences pdev-subordinate without checking the subordinate bus. This may lead to null pointer dereferencing and early startup suspension...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.7 contains security vulnerabilities. These vulnerabilities stem from synchronization conflicts between nfcllcpsocketrelease and nfcllcpacceptdequeue. This can lead to concurrent deconnection and the release of the same sub-socket. As a result, the socket may be reused...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.2 contains security vulnerabilities. These vulnerabilities stem from the use of NULL pmuctx in the perfpmuschedtask function, which may lead to undefined behavior due to null pointer dereferencing in the kernel...

Linux Kernel Security Vulnerabilities

The Linux kernel versions 6.16.8 to 6.17 contain security vulnerabilities. These vulnerabilities arise when user integrity metadata is combined with direct I/O polling. In this scenario, IOCBHASMETADATA reserves iocb-private as uiometa, while iocbbioiopoll treats it as bio. This leads to calls to...