CVE-2026-111128 Assimp through 6.0.5 NULL Pointer Dereference via Ogre Importer Bone Assignment

Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone indices in OgreStructs.cpp. Attackers can supply a crafted .mesh and .skeleton file referencing a missing bone, causing BoneById to return...

CVE-2026-111128 Assimp through 6.0.5 NULL Pointer Dereference via Ogre Importer Bone Assignment

Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone indices in OgreStructs.cpp. Attackers can supply a crafted .mesh and .skeleton file referencing a missing bone, causing BoneById to return...

EUVD-2026-102359

Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone indices in OgreStructs.cpp. Attackers can supply a crafted .mesh and .skeleton file referencing a missing bone, causing BoneById to return...

CVE-2026-111128

Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone indices in OgreStructs.cpp. Attackers can supply a crafted .mesh and .skeleton file referencing a missing bone, causing BoneById to return...

CVE-2026-111128

Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone indices in OgreStructs.cpp. Attackers can supply a crafted .mesh and .skeleton file referencing a missing bone, causing BoneById to return...

CVE-2026-110659

A flaw was found in elfio. This vulnerability allows an attacker to cause a Denial of Service DoS by crashing applications that process untrusted binaries. By supplying a specially crafted Executable and Linkable Format ELF file containing an invalid relocation section link, an attacker triggers ...

CVE-2026-98399

A flaw was found in the Linux kernel. On s390 IBM Z systems booted without an Initial Program Load IPL parameter block, such as during direct kernel boot, the kernel does not verify the parameter block before dereferencing it during dump operations. A local privileged user could trigger this...

CVE-2026-98400

A flaw was found in the Linux kernel's s390 architecture. On systems booted without an Initial Program Load IPL parameter block, such as direct virtual machine boots, the kernel crash shutdown handler unconditionally dereferences an uninitialized pointer when preparing crash data. If a crash...

Portable SDK for UPnP Devices – Improper exception handling leads to vulnerabilities

The Portable SDK for UPnP Devices versions prior to 2.0.2 have a vulnerability related to improper exception handling. This vulnerability arises from the ixmlNodecompare function, which directly passes the nullable fields nodeValue, namespaceURI, prefix, and localName to the strcmp function. When...

FreeRDP has vulnerabilities related to improper exception handling

Versions of FreeRDP prior to 3.32.0 have a vulnerability related to improper exception handling. This vulnerability stems from a null pointer dereferencing in the websocket transport. When a malicious gateway sends a zero-length ping, websocketreplypong will pass an empty stream to...

Netcore NR256CN: Improper exception handling vulnerability

Netcore NR256CN versions 1.5.140116 and earlier have a vulnerability related to improper exception handling. This vulnerability stems from a null pointer dereferencing in the Boa web server’s userauth function. Unauthenticated attackers can exploit this vulnerability by sending aBasic Authorizati...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: edif: Fixed a NULL pointer dereference in the RX SA delete check. The qlachkedifrxsadeletepending function obtains the SCSI command via GETCMDSPsp and immediately dereferences cmd-scdatadirection. This command...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: dax: Reading daxdev-holderops once in daxholdernotifyfailure daxholdernotifyfailure reads daxdev-holderops twice without using READONCE. Once for the NULL check, and once for the indirect notifyfailure call. A concurrent...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Rejects non-VALID sessions in the compound request branch. The smb2checkusersession function takes a shortcut for any operation that is not the first in a COMPOUND request. It reuses the work-sess structure the session bou...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: btrfs: Do not perform trimming on a device that is not writable. BUG There is a bug report where btrfs/242 can randomly fail due to a NULL pointer dereference at the following locations: - Run fstests btrfs/242 at 2026-06-01...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Initialize IRQ data before requesting IRQs. The function dwedmairqrequest passes the struct dwedmairq structure to requestirq, before dwedmachannelsetup fills the back pointer. As a result, a shared interrupt...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: platform/surface: acpi-notify: Check ACPI companion before use Since every platform driver may be forced to match a device that does not match its list of device IDs due to devicematchdriveroverride, platform drivers that rely on...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: libceph: A potential nullptrderef issue has been prevented in cephhandleauthreply. If a message of type CEPHMSGAUTHREPLY contains a zero value for both protocol and result, this is currently not treated as an error. When...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fixed afunix nullptrderef in proto update unixstreamconnect sets skstate WRITEONCEsk-skstate, TCPESTABLISHED before it assigns a peer unixpeersk = newsk. skstate == TCPESTABLISHED makes sockmapskstateallowed believe...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: tty: serial: pchuart: added a check for dmaalloccoherent A check for a failure with dmaalloccoherent has been added to prevent a potential dereferencing of a NULL pointer in dmahandlerx. Properly release DMA channels and the...