cve-2021-3449

CVE-2021-3449 OpenSSL This issue was reported to OpenSSL on 17th March 2021 by Nokia. The fix was developed by Peter Kästle and Samuel Sapalski from Nokia. Mitigation The only known fix is to update libssl1.1. Even though some applications use hardened TLS configurations by default that disable T...

CVE-2026-114046

FreeRDP versions 3.0.0 before 3.32.0 are vulnerable to a null-pointer dereference within the smartcard emulation backend. The issue occurs when the backend accepts a null per-reader name during SCardGetStatusChange requests. A malicious RDP server can trigger this by sending a crafted reader-stat...

CVE-2026-31431

CVE-2026-31431 — From a NULL Pointer to Root: Exploiting AFALG AEAD in the Linux Kernel Bug class: Null pointer dereference → heap OOB write → credential overwrite Affected subsystem: net/alg/afalg.c Impact: Local Privilege Escalation unprivileged user → root Affected kernels: Linux 4.4 – 4.9...

practice-22-23

Project To run: ./script.sh GitHub repository - https://github.com/LaCinquette/practice-22-23 Progress 1. For vulnerability research I chose the FFmpeg project. I found a commit that met the requirements, namely: Matched the type CWE-476 - null pointer dereference 2. Created a Dockerfile in which...

tpwn

tpwn cve-2015-???? poc os x 10.10.5 kernel local privilege escalation vulnerability got burned in 10.11 full writeup etason shout out @ unthreadedjb 4 hax Install NULLGuard to protect yourself against tpwn and other NULL Pointer Deference bugs...

CVE-2026-113680

A flaw was found in HarfBuzz. This vulnerability allows an attacker to cause a Denial of Service DoS by supplying a specially crafted font containing an embedded WebAssembly Wasm module. When an application shapes text using the malicious font, the module passes out-of-range memory addresses to...

CVE-2026-64593

A flaw was found in the btrfs filesystem of the Linux kernel. A local user could trigger a system crash by attempting to perform a trim operation on a storage device that was previously unavailable but has since reconnected and is not writeable. This issue arises from a synchronization problem...

CVE-2026-87117

A flaw was found in Apache Thrift. A remote attacker could trigger a Denial of Service DoS by submitting specially crafted input to an application utilizing the PHP bindings. This condition causes a null pointer dereference, crashing the service and rendering it unavailable to legitimate users...

CVE-2026-23398

CVE-2026-23398 Linux Kernel icmptagvalidation NULL Pointer Dereference Remote DoS Description icmptagvalidation in net/ipv4/icmp.c dereferences inetprotosproto without a NULL check. A remote attacker can send a single crafted ICMP Fragmentation Needed packet with an unregistered inner protocol...

CVE-2026-89784

A flaw was found in the Linux kernel's SUNRPC component. When an in-kernel RPC service registers with the local rpcbind under memory pressure, a failure in memory allocation can lead to a NULL pointer being dereferenced. This unchecked NULL pointer can cause the kernel to crash, resulting in a...

CVE-2026-80912

A flaw was found in the Linux kernel's SELinux subsystem. When processing security class values, the securitygetclasses function could return a null pointer if a class value was not properly defined by the security policy. This could lead to a null pointer dereference, potentially causing a syste...

CVE-2026-80730

A flaw was found in the Linux kernel. The ring-buffer component's cleanup routine can incorrectly attempt to stop a kernel thread using an invalid error pointer. This happens when kthreadrunoncpu fails, storing an error pointer in the rbthreads array. Calling kthreadstop on this invalid pointer...

CVE-2026-97605

A flaw was found in the Linux kernel. When resizing the decompression stream pool in the Enhanced Read-Only File System EROFS encounters a memory allocation failure, an uninitialized stream is improperly retained in the active pool. A local user accessing or decompressing an affected filesystem c...

CVE-2026-93212

A flaw was found in the Linux kernel NFS daemon nfsd. During network teardown, the nfsdserv pointer is prematurely cleared while the file cache cleanup process is still active. This can lead to a null pointer dereference in the nfsdfilenetdispose function. Exploiting this vulnerability could caus...

CVE-2026-93210

A flaw was found in the Linux kernel's Server Message Block SMB client Distributed File System DFS cache. This vulnerability occurs due to improper handling of invalid target hints, specifically when a null pointer is dereferenced within the dfscachenorequpdatetgthint function. An attacker could...

CVE-2026-90019

A flaw was found in the Linux kernel. A null pointer dereference can occur in the usbputfunctioninstance function within the USB gadget subsystem. This issue arises because a file descriptor fd is not allocated before being dereferenced in an error path, which can lead to a system crash. A local...

CVE-2026-89955

A flaw was found in the s390/vfio-ap component of the Linux kernel. A local attacker could exploit a race condition during the queue probing process. This occurs when a concurrent read of the 'status' attribute happens before the necessary driver data is initialized, leading to a NULL pointer...

CVE-2026-89958

A flaw was found in the Linux kernel's s390/vfio-ap component. Within the call stack of specific callback functions, a mutex is acquired without properly checking if a critical pointer matrixmdev-kvm is initialized. If this pointer is NULL, attempting to access it will trigger a NULL pointer...

CVE-2026-89874

A flaw was found in the Linux kernel's v4l2-async media subsystem. When creating ancillary media links, the v4l2asyncmatchnotify function attempts to delete an unlinked entry if the link creation fails. This can lead to a null pointer dereference, potentially causing a system crash. A local...

CVE-2026-89851

A flaw was found in the Linux kernel's qla2xxx SCSI driver. An issue in the qla2x00dfsfcewrite function, responsible for parsing Fibre Channel over Ethernet FCE trace enable settings in debugfs, could lead to a null pointer dereference. A local attacker with access to debugfs could trigger this...