EUVD-2026-98338

A weakness has been identified in Wavlink WL-WN592AX6 250422. Affected by this issue is the function main of the file /cgi-bin/upload.cgi. This manipulation of the argument Cookie causes null pointer dereference. The attack is possible to be carried out remotely. The exploit has been made availab...

CLSA-2026-1791875122 httpd: Fix of CVE-2026-63686

CVE-2026-63686: modxml2enc: NULL pointer dereference on charset conversion failure...

CLSA-2026-1791849789 Fix CVE(s): CVE-2026-107885, CVE-2026-107886, CVE-2026-107888

SECURITY UPDATE: NULL pointer dereference on held jobs - debian/patches/CVE-2026-107888.patch: abort a held job whose destination printer or class has gone away instead of dereferencing a NULL printer in scheduler/job.c cupsdCheckJobs; backport of upstream commit...

CVE-2026-95122

mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks in src/mp4file.cpp. This allows a remote attacker to cause a denial of service...

CVE-2026-95122

The mp4v2 library version 2.0.0 is vulnerable to a NULL pointer dereference within the MP4File::GenerateTracks() function located in src/mp4file.cpp . This security flaw allows a remote attacker to cause a denial of service (DoS). While the documents confirm the vulnerability and provide its CVSS...

EUVD-2026-98803

mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks in src/mp4file.cpp. This allows a remote attacker to cause a denial of service...

CVE-2026-95122

mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks in src/mp4file.cpp. This allows a remote attacker to cause a denial of service...

PT-2026-111632

mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks in src/mp4file.cpp. This allows a remote attacker to cause a denial of service...

PT-2026-111588

Name of the Vulnerable Software and Affected Versions yt-dlp-web-ui versions prior to 4.0.1 Description A NULL pointer dereference occurs in the Service.Formats JSON-RPC method. This allows remote unauthenticated attackers to crash the server by sending a request with a url value such as --versio...

PT-2026-111531

FreeRDP 3.0.0-beta4 before 3.32.0 contains a NULL pointer dereference in arm handle request ok when an ARM endpoint returns an empty HTTP 200 body. Attackers controlling the configured ARM gateway can return a zero-length body to pass NULL to strnlen and crash the connecting client...

PT-2026-111534

FreeRDP 3.27.1 before 3.32.0 contains a NULL pointer dereference in update read cache bitmap v3 order in libfreerdp/core/orders.c, which accesses the client bitmap cache when the CBR3 DO NOT CACHE flag is set, even though the cache is not yet initialized before Demand Active. A malicious or...

PT-2026-111602

CvFWD contained a null pointer dereference affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale...

PT-2026-111301

A weakness has been identified in Wavlink WL-WN592AX6 250422. Affected by this issue is the function main of the file /cgi-bin/upload.cgi. This manipulation of the argument Cookie causes null pointer dereference. The attack is possible to be carried out remotely. The exploit has been made availab...

CVE-2026-107613

A NULL pointer dereference vulnerability in the Win8ScreenDriver component of GlavSoft TightVNC Server for Windows before 2.8.88 allows an attacker to crash the server, causing a denial of service. When re-initialization of the DXGI Desktop Duplication driver fails in applyNewScreenProperties for...

PT-2026-111814

Adobe Framemaker is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in...

PT-2026-113417

🚨 CVE-2026-105896 Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires...

PT-2026-113293

Substance3D - Stager is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction...

PT-2026-113296

Dimension is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a...

PT-2026-113407

Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interacti...

PT-2026-113409

Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interacti...