CLEANSTART-2026-QJ65507 Malformed requests may cause the server to dereference a NULL pointer

Security vulnerability affects the apache2 package. Malformed requests may cause the server to dereference a NULL pointer...

CLEANSTART-2026-GK10724 crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can all...

Security vulnerability affects the apache2 package. A crafted URI sent to httpd configured as a forward proxy ProxyRequests on can cause a crash NULL pointer dereference or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix...

CLEANSTART-2026-XP17348 null pointer dereference in mod_proxy in Apache HTTP Server 2

Security vulnerability affects the apache2 package. null pointer dereference in modproxy in Apache HTTP Server 2...

CLEANSTART-2026-OA48166 Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance

Security vulnerability affects the apache2 package. Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance...

CVE-2026-107655: NULL Pointer Dereference

A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes, causing an unhandled null pointer dereference. An unauthenticated attacker permitted to submit jobs to a shared printer queue can send a crafted Interne...

PT-2026-109179

NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift c glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PT-2026-109195

NULL pointer dereference vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PT-2026-108793

Name of the Vulnerable Software and Affected Versions CUPS affected versions not specified Description An issue exists when processing embedded job ticket comments within documents, where the service improperly handles specific Internet Printing Protocol IPP attributes. This leads to an unhandled...

CVE-2026-107888: NULL Pointer Dereference

OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs when a job marked job-held-on-create refers to a temporary printer that has been automatically deleted. Temporary-printer cleanup can remove the destination without canceling its held jobs, and the scheduler...

PT-2026-108721

Name of the Vulnerable Software and Affected Versions OpenPrinting CUPS versions prior to 2.4.20 Description A NULL pointer dereference occurs in the cupsdCheckJobs function when a job marked job-held-on-create refers to a temporary printer that has been automatically deleted. The temporary-print...

CVE-2026-107890: NULL Pointer Dereference

OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests. IPP parsing creates unnamed separator attributes with IPPTAGZERO, but addjob converts these separators to IPPTAGJOB. During job startup, getoptions/ipplength subsequentl...

CVE-2026-108063: NULL Pointer Dereference

A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its key. By providing a specially crafted dictionary file to an application that queries it, an attacker can trigger an unexpected application crash,...

CVE-2026-104114: NULL Pointer Dereference

A NULL pointer dereference in the illumos Network Auto-Magic daemon nwamd allows a local user to crash the daemon. nwamddoorswitch in usr/src/cmd/cmd-inet/lib/nwamd/doorif.c writes to the caller's request structure before checking that a request was supplied, and before checking the caller's...

CVE-2026-108093: NULL Pointer Dereference

A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation-bpc parasites without ensuring the parasite data is present before dereferencing it. Opening a specially crafted XCF file with a zero-size simulation parasite can cause a NULL pointer dereference and...

HAProxy hpack_dht_insert Heap Buffer Overflow DoS

The vulnerability of the hpackdhtinsert function in the source file src/hpack-tbl.c of the HAProxy server software is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions...

PT-2026-108981

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description The XCF loader fails to verify the presence of parasite data before dereferencing it when processing image-simulation-intent and image-simulation-bpc parasites. A NULL pointer dereference, which...

PT-2026-108722

Name of the Vulnerable Software and Affected Versions OpenPrinting CUPS versions prior to 2.4.20 Description A NULL pointer dereference occurs during the processing of job-creation requests containing repeated IPP group tags. The issue arises because IPP parsing creates unnamed separator attribut...

driver/net/ethernet/intel/idpf/idpf_lib.c component of the DoS

The vulnerability in the drivers/net/ethernet/intel/idpf/idpflib.c component of the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel idpf_attach_and_open idpf_detach_and_close DoS

The vulnerability of the functions idpfattachandopen and idpfdetachandclose in the drivers/net/ethernet/intel/idpf/idpflib.c component of the Linux kernel is related to the use of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-107655

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes, causing an...