Linux Distros Unpatched Vulnerability : CVE-2026-80917

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems On 32-bit systems the config space is too large to ioremap in one go, so pciecamcreate map...

PT-2026-89520

Name of the Vulnerable Software and Affected Versions Tesseract versions prior to 5.5.4 Description A flaw exists in the Plumbing::DeSerialize function within src/lstm/plumbing.cpp that allows a crafted .traineddata model to contain a zero-length stack for NT SERIES, NT PARALLEL, or NT REVERSED...

ROS-20260910-73-0128

The vulnerability of the InputSensorRegister function in the MP4Box utility of the GPAC multimedia platform, which involves swapping the zero pointer during processing of an incorrect XMT scene, allows a intruder to trigger a service failure...

CVE-2026-79590: NULL Pointer Dereference

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...

CVE-2026-79590

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...

CVE-2026-79590

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...

CVE-2026-79590

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0 . An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, leading to undefined behavior and an application crash ...

CVE-2026-79590

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...

CVE-2026-79590

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...

ROS-20260910-73-0169

The vulnerability of the gfsgcommandapply function in the MP4Box utility of the GPAC multimedia platform, which relates to the handling of incorrect XMT scenes by resetting the null pointer, allows a violator to trigger a service failure...

ROS-20260910-73-0148

The vulnerability of the envtestevaluate function in the MP4Box utility of the GPAC multimedia platform, which relates to the assignment of a null pointer during processing of an incorrect XMT scene, allows a malicious actor to trigger a service failure...

ROS-20260910-73-0142

The vulnerability of the composerlayoutmodified function in the MP4Box utility of the GPAC multimedia platform, which relates to the issue of handling incorrect XMT scenes by resetting the null pointer, allows a malicious actor to trigger a service failure...

CVE-2026-45747: NULL Pointer Dereference

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.16, the Lua TLS certificate information helper could dereference NULL certificate fields when a Lua script requested certificate information for TLS traffic...

ROS-20260910-73-0145

The vulnerability of the gfsgcommandapply function in the MP4Box utility of the GPAC multimedia platform, which relates to the handling of incorrect XMT scenes by resetting the null pointer, allows a violator to trigger a service failure...

389-ds:1.4 security, bug fix, and enhancement update

1.4.3.39-28 - Bump version to 1.4.3.39-28 - Resolves: RHEL-222326 - EMBARGOED CVE-2026-18453 389-ds:1.4/389-ds-base: 389-ds-base: pre-authentication NULL pointer dereference via paged results and USEONEBACKEND control in opsharedsearch rhel-8.10.z - Resolves: RHEL-220511 - EMBARGOED CVE-2026-1835...

SOGo Null Pointer DoS

The vulnerability of the Alinto SOPE framework and the SOGo software for collaborative work is related to the handling of a zero pointer. Exploiting this vulnerability could allow an attacker to cause service failures...

RHEL 9 : httpd (RHSA-2026:66323)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:66323 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: incomplete fix...

Oracle Linux 8 : ELSA-2026-64791-0: / 389-ds:1.4 (ELSA-2026-647910)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-647910 advisory. - Resolves: RHEL-222326 - EMBARGOED CVE-2026-18453 389-ds:1.4/389-ds-base: 389-ds-base: pre-authentication NULL pointer dereference via paged results...

AlmaLinux 9 : 389-ds-base (ALSA-2026:64784)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:64784 advisory. 389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket CVE-2026-18355 389-ds-base:...

A NULL pointer dereference vulnerability in mruby 4.0.0

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...