CVE-2026-67184-Unauthenticated-NULL-Pointer-Dereference-Crashes-the-Server-TinyWeb-

Security Advisory: Unauthenticated NULL Pointer Dereference Crashes the Server TinyWeb Assigned CVE ID: CVE-2026-67184 Summary When TinyWeb fails to parse a request line, it returns an error but leaves the request's URL pointer set to NULL. The caller ignores the error and passes the request to t...

CVE-2025-55780

CVE-2025-55780 Null Pointer De-reference in MuPDF 1.26.4 EPUB Rendering Function CVE Reference - CVE-2025-55780 Affected Versions : 1.26.7 and before are affected Found and tested on : 1.26.4 Severity CVSSv3 score : 7.5 High Fixed in commit :...

DEBIAN-CVE-2026-114046

FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend that accepts a null per-reader name in SCardGetStatusChange requests. A malicious RDP server can send a crafted reader-state entry with a null szReader, causing strcmp or wcscmp to crash the client...

PoC-CVE-2025-69420

CVE-2025-69420 — OpenSSL TimeStamp Response type confusion PoC Crash-only laboratory reproducer for CVE-2025-69420 in OpenSSL. The PoC loads a valid RFC 3161 TimeStamp Response, changes the signed ESS attribute from VASN1SEQUENCE to VASN1NULL in memory, and calls TSRESPverifyresponse. On an...

PoC-CVE-2025-69421

CVE-2025-69421 crash-only reproducer This repository contains a minimal malformed PKCS12 file that reproduces CVE-2025-69421 in an isolated laboratory environment. The generated PFX contains EncryptedData whose EncryptedContentInfo omits the optional encryptedContent field. Vulnerable OpenSSL...

Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0

Summary Image.merge checks the mode of every input band except band 0. If band 0 is a single-band I or F image, the native merge routine reads a pixel pointer that is NULL for those modes and the process crashes. The IPTC plugin reaches this from a plain Image.open followed by a load, and IPTC ha...

GHSA-CP9V-662Q-VVX9 Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0

Summary Image.merge checks the mode of every input band except band 0. If band 0 is a single-band I or F image, the native merge routine reads a pixel pointer that is NULL for those modes and the process crashes. The IPTC plugin reaches this from a plain Image.open followed by a load, and IPTC ha...

CVE-2026-112381

Apache Traffic Server can crash with a null pointer dereference when a client POST request is torn down via half-close while a chunked origin response is being reparsed from a reentrant write-ready callback, a timing-dependent race introduced by the CVE-2021-32564 flow-control backports. This iss...

EUVD-2026-107538

Apache Traffic Server can crash with a null pointer dereference when a client POST request is torn down via half-close while a chunked origin response is being reparsed from a reentrant write-ready callback, a timing-dependent race introduced by the CVE-2021-32564 flow-control backports. This iss...

CVE-2026-112381

Apache Traffic Server can crash with a null pointer dereference when a client POST request is torn down via half-close while a chunked origin response is being reparsed from a reentrant write-ready callback, a timing-dependent race introduced by the CVE-2021-32564 flow-control backports. This iss...

CVE-2026-79976

The MCTP-over-I2C+GPIO target binding in subsys/pmci/mctp/mctpi2cgpiotarget.c emulates a small pseudo-register file, where the bus controller first writes a register number and then writes or reads payload bytes. The selected register b-regaddr and the data-phase flag b-rxtx were never cleared wh...

CVE-2026-79976

The MCTP-over-I2C+GPIO target binding in subsys/pmci/mctp/mctp_i2c_gpio_target.c is vulnerable to a NULL pointer dereference because the b->reg_addr and b->rxtx flags are not cleared when an I2C STOP is issued. This allows a controller on the shared management bus to re-enter mctp_i2c_gpio_...

CVE-2026-79976 NULL pointer dereference in the MCTP I2C+GPIO target binding triggerable by a peer I2C controller

The MCTP-over-I2C+GPIO target binding in subsys/pmci/mctp/mctpi2cgpiotarget.c emulates a small pseudo-register file, where the bus controller first writes a register number and then writes or reads payload bytes. The selected register b-regaddr and the data-phase flag b-rxtx were never cleared wh...

CVE-2026-105923

A flaw was found in qt6. An attacker could exploit this vulnerability to cause a Denial of Service DoS by crashing the application. When the VectorImage component processes a specially crafted Scalable Vector Graphics SVG file, an integer calculation error triggers an invalid memory access...

CVE-2026-98637

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for ARM64. When a virtual CPU vCPU fails to initialize Scalable Vector Extension SVE support, feature flags are improperly handled, leaving subsequent vCPUs in an inconsistent state without allocated memory. A guest...

CVE-2026-80752

A flaw was found in the Linux kernel's psxpad-spi driver. This vulnerability occurs because the psxpadspisuspend function attempts to access controller state before it has been properly initialized, leading to a null pointer dereference. A local attacker could exploit this to cause a system crash...

CVE-2026-80743

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture System on Chip ASoC xilinx formatterpcm component. This vulnerability arises when interrupt request IRQ handlers attempt to access driver data before it has been fully initialized during device setup. An interrupt occurring ...

CVE-2026-76492

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...

CVE-2026-90024

A flaw was found in the Linux kernel's USB MIDI 2.0 gadget function. When the MIDI 2.0 gadget is configured with a specific input block direction, an endpoint may not be properly initialized. During subsequent endpoint cleanup, an attempt to access this uninitialized endpoint can lead to a...

CVE-2026-89780

A flaw was found in the Qualcomm rmnet driver of the Linux kernel. An unprivileged local user can exploit this vulnerability by manipulating network namespaces and rmnet link configurations. This can lead to a null-pointer dereference when processing deaggregated frames, causing a kernel panic an...