CVE-2026-112259 Gimp: gimp: null pointer dereference in swatchbooker (sbz) palette import

A flaw was found in GIMP. Importing a crafted SBZ palette without a color-model attribute can cause a NULL pointer dereference during string comparison, resulting in denial of service of the GIMP application...

CVE-2025-52290

A NULL pointer dereference in the avprivh264hasnumreorderframes function of Ffmpeg version N-119856-gbe46370941 allows attackers to cause a Denial of Service DoS via processing a crafted media file...

CVE-2026-91781

A flaw was found in GNU Binutils. A local attacker could exploit a null pointer dereference vulnerability in the ELF Section Handler. This could lead to a Denial of Service DoS, making the affected system or application unavailable...

CVE-2026-91779

A flaw was found in GNU Binutils. A local attacker can trigger a null pointer dereference within the Eh Frame Handler component by performing a specific manipulation. This vulnerability can lead to a Denial of Service DoS, making the affected system or application unavailable...

CVE-2026-91782

A flaw was found in GNU Binutils. A local attacker could exploit a null pointer dereference in the elfx86allocatedynrelocs function. This vulnerability could lead to a Denial of Service DoS condition, making the affected system or application unavailable...

CVE-2026-91780

A flaw was found in GNU Binutils. A local attacker can trigger a null pointer dereference by manipulating input to the 'elflinkaddobjectsymbols' function. This can lead to a denial of service DoS condition, making the affected component unavailable...

CVE-2026-98522

A flaw was found in the Linux kernel's Imagination PowerVR GPU driver. This vulnerability allows a local user to cause a Denial of Service DoS by crashing the system. The issue occurs when the driver fails to properly return an error code after a memory mapping failure, allowing execution to...

CVE-2026-98523

A flaw was found in the Linux kernel's Direct Rendering Manager DRM subsystem. A local user can cause a Denial of Service DoS by closing a DRM device file descriptor associated with a partially initialized client. Because the kernel fails to properly unregister an incomplete framebuffer client...

CVE-2026-98455

A flaw was found in the Linux kernel's Bluetooth Radio Frequency Communication RFCOMM subsystem. This vulnerability allows a local user to cause a Denial of Service DoS by crashing the system. By querying connection options on a socket whose connection was disconnected while deferred setup remain...

CVE-2026-12155

IBM MQ could allow an authenticated attacker to cause a denial of service by sending specially crafted multicast status messages that trigger a NULL pointer dereference...

EUVD-2026-104469

IBM MQ could allow an authenticated attacker to cause a denial of service by sending specially crafted multicast status messages that trigger a NULL pointer dereference...

CVE-2026-12155

The IBM MQ software is susceptible to a denial of service vulnerability due to the deserialization of untrusted data . An authenticated attacker can trigger a NULL pointer dereference by sending specially crafted multicast status messages. No specific details regarding affected versions, remediat...

CVE-2026-12155 IBM MQ Deserialization of Untrusted Data

IBM MQ could allow an authenticated attacker to cause a denial of service by sending specially crafted multicast status messages that trigger a NULL pointer dereference...

CVE-2026-98510

A flaw was found in the Linux kernel's Intel Xe graphics driver. When closing a GPU virtual memory space, page tables were destroyed before contested virtual memory areas were properly unlinked from shared buffer objects. A concurrent thread evicting a shared buffer object can attempt to access t...

CVE-2026-98508

A flaw was found in the Linux kernel's VirtIO GPU driver. This flaw allows a local user to cause a denial of service DoS by triggering a kernel crash. Under memory pressure, the driver fails to verify whether fence memory allocation succeeds during graphics command submission, leading to an...

CVE-2026-98504

A flaw was found in the Linux kernel's PCI subsystem. When generating dynamic Open Firmware OF device tree properties, the kernel fails to verify that a subordinate bus exists for a PCI bridge before accessing its configuration. A local attacker or physical device configuration can trigger this...

SUSE-SU-2026:4619-1 Security update for expat

This update for expat fixes the following issues: - CVE-2025-59375: denial of service resource consumption caused by processing malformed small documents bsc1249584. - CVE-2026-24515: NULL dereference CWE-476 due to function XMLExternalEntityParserCreate failing to copy the encoding handler data...

CVE-2024-36424

CVE-2024-36424 This vulnerability was discovered and disclosed by M. Akil Gündoğan from Secunnix Vulnerability Research Team. This repository will hold the proof-of concept and advisories. Details: Product: K7 Ultimate Security Affected versions: v17.0.2019 CVE ID: CVE-2024-36424 Operating System...

openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

A flaw was found in OpenSSL. A remote attacker could exploit this vulnerability by sending a specially crafted Cryptographic Message Syntax CMS EnvelopedData message. During the processing of a KeyTransportRecipientInfo with RSA-OAEP encryption, the system attempts to access an optional parameter...

NFSundown

Overview Proof-of-Concept exploit for NFSundown CVE-2025-38089. It can remotely trigger a kernel crash in an NFS server. Details A remote attacker can trigger a kernel null pointer dereference and crash the kernel by sending a specially crafted RPC request. This occurs due to improper handling of...