CVE-2026-101948

A NULL Pointer Dereference vulnerability exists in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved . A remote unauthenticated BGP peer can trigger a denial of service (DoS) by sending a specific BGP FlowSpec update received by an affected BGP session when a BGP...

CVE-2026-101977

A NULL Pointer Dereference vulnerability exists in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved . When ephemeral configuration is utilized, a configured eBGP peer can trigger a persistent routing-daemon denial of service by sending a specific BGP packet. Tec...

EUVD-2026-101442

A NULL Pointer Dereference vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP peer to cause a persistent routing-daemon denial of service via a specific BGP packet when ephemeral configuration is used...

CVE-2026-101977 Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when ephemeral configuration is used

A NULL Pointer Dereference vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP peer to cause a persistent routing-daemon denial of service via a specific BGP packet when ephemeral configuration is used...

AZL-108399 CVE-2026-110659 affecting package mstflint 4.28.0-1

ELFIO through 3.12 contains a NULL pointer dereference vulnerability in relocationsectionaccessor getentry that allows attackers to crash applications via an unvalidated shlink index. Attackers can supply a crafted ELF file whose SHTREL or SHTRELA section has a dangling shlink, causing...

CVE-2026-110659

ELFIO through 3.12 contains a NULL pointer dereference vulnerability in relocationsectionaccessor getentry that allows attackers to crash applications via an unvalidated shlink index. Attackers can supply a crafted ELF file whose SHTREL or SHTRELA section has a dangling shlink, causing...

EUVD-2026-101436

A NULL Pointer Dereference vulnerability in the pkid component of Juniper Networks Junos OS allows an unauthenticated remote attacker to cause a denial of service via a malformed packet received during CMP enrollment or automatic certificate re-enrollment...

Improper exception handling vulnerability in QNAP File Station 5

Versions 5.5.x prior to QNAP File Station 5 5.5.6.5243 contain an improper exception handling vulnerability. This vulnerability stems from a null pointer dereference, which may allow remote attackers to perform denial-of-service attacks after obtaining a user account...

Improper exception handling vulnerability in QNAP File Station 5

Versions 5.5.x prior to QNAP File Station 5 5.5.6.5243 contain an improper exception handling vulnerability. This vulnerability stems from a null pointer dereference; after gaining access to a user account via remote attackers, they can launch denial-of-service attacks...

Getkin Kin-OpenAPI: Improper exception handling leads to vulnerabilities

The getkin kin-openapi versions before 0.136.0 to 0.143.0 have a vulnerability due to improper handling of exceptions. This vulnerability stems from the openapi3filter accepting OpenAPI 3.1 array formats that lack the items keyword. When decoding request bodies, response headers, and other array...

Improper handling of exceptions in the Open Asset Import Library

Open Asset Import Library 6.0.5 and earlier versions have a vulnerability related to improper exception handling. This vulnerability stems from Ogre3D’s binary mesh importer, specifically the OgreBinarySerializer::ReadAnimationKeyFrames function. This function does not validate the animation trac...

HPE NonStop SQL/MX Runtime Statistics Input Validation Error Vulnerability

HPE NonStop SQL/MX Run-Time Statistics T1117L40 and earlier versions contain an input validation error vulnerability. This vulnerability stems from memory corruption and null pointer dereferencing, potentially leading to process crashes, denial of service, or information leakage...

CVE-2026-110600

xlsxio through 0.2.37 contains a NULL pointer dereference vulnerability in mainsheetgetsheetfileexpatcallbackelementstart in lib/xlsxioread.c that allows attackers to crash applications via crafted files. Attackers can supply a .xlsx file whose workbook.xml.rels contains a worksheet Relationship...

CVE-2026-110659 ELFIO through 3.12 NULL Pointer Dereference via relocation_section_accessor get_entry

ELFIO through 3.12 contains a NULL pointer dereference vulnerability in relocationsectionaccessor getentry that allows attackers to crash applications via an unvalidated shlink index. Attackers can supply a crafted ELF file whose SHTREL or SHTRELA section has a dangling shlink, causing...

CVE-2026-110659

The ELFIO library, versions through 3.12 , is vulnerable to a NULL pointer dereference in the relocation_section_accessor get_entry() function. The root cause is an unvalidated sh_link index , where an attacker can provide a crafted ELF file with a dangling sh_link in the SHT_REL or SHT_RELA sect...

EUVD-2026-101132

ELFIO through 3.12 contains a NULL pointer dereference vulnerability in relocationsectionaccessor getentry that allows attackers to crash applications via an unvalidated shlink index. Attackers can supply a crafted ELF file whose SHTREL or SHTRELA section has a dangling shlink, causing...

CVE-2026-110659 ELFIO through 3.12 NULL Pointer Dereference via relocation_section_accessor get_entry

ELFIO through 3.12 contains a NULL pointer dereference vulnerability in relocationsectionaccessor getentry that allows attackers to crash applications via an unvalidated shlink index. Attackers can supply a crafted ELF file whose SHTREL or SHTRELA section has a dangling shlink, causing...

CVE-2026-110659

ELFIO through 3.12 contains a NULL pointer dereference vulnerability in relocationsectionaccessor getentry that allows attackers to crash applications via an unvalidated shlink index. Attackers can supply a crafted ELF file whose SHTREL or SHTRELA section has a dangling shlink, causing...

CVE-2026-110659 ELFIO through 3.12 NULL Pointer Dereference via relocation_section_accessor get_entry

ELFIO through 3.12 contains a NULL pointer dereference vulnerability in relocationsectionaccessor getentry that allows attackers to crash applications via an unvalidated shlink index. Attackers can supply a crafted ELF file whose SHTREL or SHTRELA section has a dangling shlink, causing...

SUSE-SU-2026:24188-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-35191: QUIC Unvalidated Amplification Credit may be Over Accounted bsc1280590. - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for...