openssl: invalid pointer dereference in CMP server via crafted protectionAlg

A flaw was found in OpenSSL. A crafted CMP Certificate Management Protocol message can cause an invalid pointer dereference due to a missing type check in the password-based protection verification. A remote, unauthenticated attacker can crash applications acting as a CMP server or client,...

Important: Red Hat Security Advisory: openssl security update

An update for openssl is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Linux Kernel DoS

The kernel vulnerability in the Linux operating system is related to dereferencing an invalid pointer. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

CVE-2026-116782 FreeSWITCH: Pre-authentication invalid pointer dereference in mod_rtmp connect command handling

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, rtmpiconnect passed the first RTMP connect argument to amf0objectget without checking whether the...

CVE-2026-116782

Prior to version 1.11.2 , FreeSWITCH is vulnerable to an invalid pointer dereference within the mod_rtmp module. The root cause is that rtmp_i_connect() passes the first RTMP connect argument to amf0_object_get() without verifying if the AMF value is an object. Providing a string or number instea...

CVE-2026-116782 FreeSWITCH: Pre-authentication invalid pointer dereference in mod_rtmp connect command handling

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, rtmpiconnect passed the first RTMP connect argument to amf0objectget without checking whether the...

CVE-2026-89994

A flaw was found in the Linux kernel's dmaengine: fsl-edma component. This vulnerability allows a local attacker to trigger a system crash, leading to a Denial of Service DoS. The flaw occurs because the fsl edma tracing events store a pointer in a ringbuffer that can become invalid before being...

CVE-2026-99069

A flaw was found in the Linux kernel's atiremote2 input driver. A local user can exploit this type confusion vulnerability to cause a Denial of Service DoS. The issue occurs because the driver's device attribute handlers improperly treat an interface pointer as a parent device pointer. By...

CVE-2026-99166

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. When handling connection events on non-InfiniBand Remote Direct Memory Access RDMA devices, the kernel fails to initialize an internal transport pointer. A remote attacker can exploit this vulnerability by sending a...

CVE-2026-42057

A flaw was found in VTK. An attacker can cause a Denial of Service DoS by supplying a specially crafted PNG image file. When processed by the PNG reader component, the malformed input triggers an invalid pointer dereference, causing the application to crash...

RHEL 9 : Satellite 6.18 (RHSA-2026:92860)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92860 advisory. openvox-agent: curl: Cookie injection via malicious HTTP server using super cookies CVE-2026-8924. openvox-agent: heap buffer overflow in C...

openssl: invalid pointer dereference in CMP server via crafted protectionAlg

A flaw was found in OpenSSL. A crafted CMP Certificate Management Protocol message can cause an invalid pointer dereference due to a missing type check in the password-based protection verification. A remote, unauthenticated attacker can crash applications acting as a CMP server or client,...

openssl: invalid pointer dereference in CMP server via crafted protectionAlg

A flaw was found in OpenSSL. A crafted CMP Certificate Management Protocol message can cause an invalid pointer dereference due to a missing type check in the password-based protection verification. A remote, unauthenticated attacker can crash applications acting as a CMP server or client,...

openssl: invalid pointer dereference in CMP server via crafted protectionAlg

A flaw was found in OpenSSL. A crafted CMP Certificate Management Protocol message can cause an invalid pointer dereference due to a missing type check in the password-based protection verification. A remote, unauthenticated attacker can crash applications acting as a CMP server or client,...

CVE-2026-41216

An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk version 9.6 . The root cause is a misuse of setjmp and longjmp within vtkPNGReader::vtkInternals::HandleLibPngError. When a malformed PNG file triggers a longjmp, the execution returns...

CVE-2026-41216

An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk 9.6. A specially crafted .png file can lead to a denial of service. An attacker can provide a malicious file to trigger this vulnerability...

EUVD-2026-113326

An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk 9.6. A specially crafted .png file can lead to a denial of service. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2026-98979

A flaw was found in the Linux kernel. The kernel improperly allows automount operations beneath internal mount points that are not associated with a mount namespace. A local user can exploit this vulnerability by accessing an affected mount path, causing an invalid pointer dereference. This flaw...

vtk vtkPNGReader::ExecuteInformation invalid pointer dereference vulnerability

Summary A invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk versions: 9.6. A specially crafted .png file can lead to a denial of service. An attacker can provide a malicious file to trigger this vulnerability. Confirmed Vulnerable Versio...

CVE-2026-42057: vtk: An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdate2 functionality of vtk 9.6

An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdate2 functionality of vtk 9.6. A specially crafted .png file can lead to a denial of service. An attacker can provide a malicious file to trigger this vulnerability...