CVE-2026-109252

FreeRDP versions 3.9.0 before 3.32.0 are vulnerable to a NULL pointer dereference within the RDPEAR NDR reader . A malicious server can trigger this by sending a CreateApReqAuthenticatorReq with a NameCount of two or more that ends before the Names pointer. This causes the cleanup process to dere...

CVE-2026-109241

FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the client video redirection channel that allows malicious servers to crash clients by sending out-of-order messages. Attackers can send a Geometry CLEAR message that nulls presentation-geometry, then send VideoData that...

CVE-2026-109241 FreeRDP before 3.32.0 NULL Dereference in Video Redirection Channel

FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the client video redirection channel that allows malicious servers to crash clients by sending out-of-order messages. Attackers can send a Geometry CLEAR message that nulls presentation-geometry, then send VideoData that...

EUVD-2026-97685

FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the client video redirection channel that allows malicious servers to crash clients by sending out-of-order messages. Attackers can send a Geometry CLEAR message that nulls presentation-geometry, then send VideoData that...

CVE-2026-109241 FreeRDP before 3.32.0 NULL Dereference in Video Redirection Channel

FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the client video redirection channel that allows malicious servers to crash clients by sending out-of-order messages. Attackers can send a Geometry CLEAR message that nulls presentation-geometry, then send VideoData that...

CVE-2026-109241

FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the client video redirection channel that allows malicious servers to crash clients by sending out-of-order messages. Attackers can send a Geometry CLEAR message that nulls presentation-geometry, then send VideoData that...

CVE-2026-109241 FreeRDP before 3.32.0 NULL Dereference in Video Redirection Channel

FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the client video redirection channel that allows malicious servers to crash clients by sending out-of-order messages. Attackers can send a Geometry CLEAR message that nulls presentation-geometry, then send VideoData that...

TechSmith MP4V2 has vulnerabilities related to improper exception handling.

The Techsmith MP4V2 2.0.0 version has a vulnerability in exception handling. This vulnerability stems from a null pointer dereferencing in the src/mp4file.cpp function, MP4File::GenerateTracks. This could allow a remote attacker to cause a denial-of-service attack...

Marco Piovanello yt-dlp Web UI improper exception handling vulnerabilities

Marco Piovanello’s yt-dlp Web UI versions 4.0.0 and earlier have a vulnerability due to improper exception handling. This vulnerability stems from a null pointer dereferencing in the Service.Formats JSON-RPC method. Attackers can exploit this vulnerability by sending a single request with a url...

CLSA-2026-1791811122 krb5: Fix of 2 CVEs

CVE-2026-107778: avoid NULL pointer dereference in krb5rdcred makecredlist - CVE-2026-107708: fix error handling in KDC PAC processing getpacprincwithrealm...

cups: NULL pointer dereference via embedded job ticket comments allows remote denial of service

A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes, causing an unhandled null pointer dereference. An unauthenticated attacker permitted to submit jobs to a shared printer queue can send a crafted Interne...

Security update for expat

This update for expat fixes the following issues: CVE-2025-59375: denial of service resource consumption caused by processing malformed small documents bsc1249584. CVE-2026-24515: NULL dereference CWE-476 due to function XMLExternalEntityParserCreate failing to copy the encoding handler data pass...

Security update for expat

This update for expat fixes the following issues: CVE-2025-59375: denial of service resource consumption caused by processing malformed small documents bsc1249584. CVE-2026-24515: NULL dereference CWE-476 due to function XMLExternalEntityParserCreate failing to copy the encoding handler data pass...

SUSE-SU-2026:4615-1 Security update for expat

This update for expat fixes the following issues: - CVE-2025-59375: denial of service resource consumption caused by processing malformed small documents bsc1249584. - CVE-2026-24515: NULL dereference CWE-476 due to function XMLExternalEntityParserCreate failing to copy the encoding handler data...

Security Bulletin: Multiple security vulnerabilities identified in Containerized version of IBM Guardium Key Lifecycle Manager

Summary Multiple security vulnerabilities have been addressed in Containerized version of IBM Guardium Key Lifecycle Manager Vulnerability Details CVEID:CVE-2026-6732 DESCRIPTION: A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema...

PT-2026-110658

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.32.0 Description A NULL pointer dereference occurs in the client video redirection channel. This issue allows a malicious server to cause a denial of service by sending out-of-order messages. Specifically, an attack...

PT-2026-110669

FreeRDP from 3.9.0 before 3.32.0 contains a NULL pointer dereference vulnerability in the RDPEAR NDR reader that allows malicious servers to crash clients via truncated KERB RPC INTERNAL NAME data. Attackers can send a CreateApReqAuthenticatorReq with NameCount of two or more ending before the...

PT-2026-110689

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.1.1-31 through 7.1.2-31 Description A NULL pointer dereference occurs in the PostScript decoder when a policy limit is reached. A remote attacker can cause a denial of service by providing a specially crafted PostScript...

ROS-20261012-73-0097

The vulnerability of the qdiscpeekdequeued function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

EulerOS 2.0 SP11 : patch (EulerOS-SA-2026-4356)

According to the versions of the patch packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of consecutive...