EUVD-2026-107221

NULL pointer dereference in the RTMP protocol implementation in Apache bRPC version onfailid, causing the process to crash. Affected Scenarios: Run an Apache bRPC RTMP server whose RtmpService::NewStream may return null i.e., the service rejects createStream requests. A remote client that sends a...

CVE-2026-82953

Apache bRPC (versions _onfail_id, leading to a Remote Denial of Service (DoS) . To remediate this, users should upgrade to bRPC version 1.18.0 or apply the official patch provided via the associated pull request.

CVE-2026-105923

A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type...

DEBIAN-CVE-2025-52290

A NULL pointer dereference in the avprivh264hasnumreorderframes function of Ffmpeg version N-119856-gbe46370941 allows attackers to cause a Denial of Service DoS via processing a crafted media file...

CVE-2026-98616

A flaw was found in the Linux kernel's fbnic driver. This flaw allows a local user to trigger a kernel crash, resulting in a Denial of Service DoS. During power management suspend or failed resume operations, the driver frees interrupt vectors without clearing the active vector counter. When the...

EUVD-2026-107159

A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type...

CVE-2026-105923

The VectorImage QML Type is vulnerable to a null-pointer dereference caused by an integer overflow . This issue can be triggered by processing a malicious SVG file, which leads to an impact on availability . No specific exploit details or remediation versions are provided in the documents.

CVE-2026-105923 Null-pointer dereference in QTriangulator reachable through VectorImage

A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type...

CVE-2026-114046

FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend that accepts a null per-reader name in SCardGetStatusChange requests. A malicious RDP server can send a crafted reader-state entry with a null szReader, causing strcmp or wcscmp to crash the client...

EUVD-2026-106997

FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend that accepts a null per-reader name in SCardGetStatusChange requests. A malicious RDP server can send a crafted reader-state entry with a null szReader, causing strcmp or wcscmp to crash the client...

CVE-2026-114046

FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend that accepts a null per-reader name in SCardGetStatusChange requests. A malicious RDP server can send a crafted reader-state entry with a null szReader, causing strcmp or wcscmp to crash the client...

CVE-2026-114046

FreeRDP versions 3.0.0 before 3.32.0 are vulnerable to a null-pointer dereference within the smartcard emulation backend. The issue occurs when the backend accepts a null per-reader name during SCardGetStatusChange requests. A malicious RDP server can trigger this by sending a crafted reader-stat...

CVE-2026-114046 FreeRDP 3.0.0 before 3.32.0 null-pointer dereference via emulated smartcard

FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend that accepts a null per-reader name in SCardGetStatusChange requests. A malicious RDP server can send a crafted reader-state entry with a null szReader, causing strcmp or wcscmp to crash the client...

SUSE CVE-2025-52290

A NULL pointer dereference in the avprivh264hasnumreorderframes function of Ffmpeg version N-119856-gbe46370941 allows attackers to cause a Denial of Service DoS via processing a crafted media file...

CVE-2025-60489

A NULL pointer dereference in the dasherinserttimelineentry function /filters/dasher.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

PT-2026-120570

The MySQL client response parser in Apache bRPC dereferences a null pointer when the server peer sends a zero-payload-length response packet. A response packet whose declared payload length is zero is accepted by the frame-length check is full package, after which the parser reads the response ty...

PT-2026-120510

A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type...

CVE-2025-60469

A NULL pointer dereference in the gfac4presentationchmode function /mediatools/avparsers.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...

CVE-2025-60479

A NULL pointer dereference in the StatSFVec2f function /scenemanager/scenestats.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-4 file...

EUVD-2025-211149

A NULL pointer dereference in the dasherinserttimelineentry function /filters/dasher.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...