UBUNTU-CVE-2026-112318

The policy RPC stubs in kadmin/server/serverstubs.c in MIT Kerberos 5 aka krb5 1.5.3 and later do not reject a NULL policy name decoded by xdrnullstring, which allows remote authenticated users to cause a denial of service kadmind crash via NULL pointer dereference by sending a policy request wit...

UBUNTU-CVE-2026-125070

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in tqidecodeframe in libavcodec/eatqi.c, which ignores initgetbits failure after an integer overflow. Attackers can supply a crafted EA file with a pIQT chunk carrying a 2^28-byte payload to crash the process, causing denial o...

Security Advisory 0210

Security Advisory 0210 . CSAF PDF Date: November 10, 2026 Revision | Date | Changes ---|---|--- 1.0 | November 10, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-121293 CVSSv3.1 Base Score: 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H CVSSv4.0 Base Score: 6.9...

Security Advisory 0211

Security Advisory 0211 . CSAF PDF Date: November 10, 2026 Revision | Date | Changes ---|---|--- 1.0 | November 10, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-120978 CVSSv3.1 Base Score: 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSSv4.0 Base Score: 6.0...

Linux Distros Unpatched Vulnerability : CVE-2026-99288

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - inet: reject unhashed sockets during established lookups TCP established ehash lookups are lockless. The socket caches involved use SLABTYPESAFEBYRCU, so memory...

PT-2026-144390

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the TCP socket lookup process for both IPv4 and IPv6. The issue occurs during established ehash lookups, which are lockless and utilize SLAB TYPESAFE BY RCU fo...

PT-2026-144324

Null pointer dereference in Windows Phone Service allows an authorized attacker to elevate privileges locally...

PT-2026-144359

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally...

PT-2026-144718

Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in...

PT-2026-144697

Name of the Vulnerable Software and Affected Versions Adobe Audition affected versions not specified Description A NULL Pointer Dereference occurs when the application attempts to read a memory address that is NULL, causing the program to crash. This issue can lead to a denial-of-service conditio...

PT-2026-144708

Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in...

CVE-2025-55780

CVE-2025-55780 Null Pointer De-reference in MuPDF 1.26.4 EPUB Rendering Function CVE Reference - CVE-2025-55780 Affected Versions : 1.26.7 and before are affected Found and tested on : 1.26.4 Severity CVSSv3 score : 7.5 High Fixed in commit :...

CVE-2026-125107

Muhammara is a node module with c/cpp bindings to modify PDF with JavaScript for node or electron. Prior to 6.0.5, Muhammara PDFParser::CreateFilterForStream in src/deps/PDFWriter/PDFParser.cpp dereferences a null PDFInteger pointer when a PDF stream uses the LZWDecode filter with a DecodeParms...

CVE-2026-90587 NULL pointer dereference in the Zephyr USB host stack when a device reports zero configurations

usbhdeviceinit in subsys/usb/host/usbhdevice.c rejects a device whose device descriptor advertises bNumConfigurations == 0, but it only logs the error and jumps to the cleanup label without setting the return code. At that point the local err is still 0 from the preceding successful descriptor...

CVE-2026-90587 NULL pointer dereference in the Zephyr USB host stack when a device reports zero configurations

usbhdeviceinit in subsys/usb/host/usbhdevice.c rejects a device whose device descriptor advertises bNumConfigurations == 0, but it only logs the error and jumps to the cleanup label without setting the return code. At that point the local err is still 0 from the preceding successful descriptor...

CVE-2026-125107 Muhammara: NULL pointer dereference in LZWDecode filter when DecodeParms omits EarlyChange key

Muhammara is a node module with c/cpp bindings to modify PDF with JavaScript for node or electron. Prior to 6.0.5, Muhammara PDFParser::CreateFilterForStream in src/deps/PDFWriter/PDFParser.cpp dereferences a null PDFInteger pointer when a PDF stream uses the LZWDecode filter with a DecodeParms...

CVE-2026-125107 Muhammara: NULL pointer dereference in LZWDecode filter when DecodeParms omits EarlyChange key

Muhammara is a node module with c/cpp bindings to modify PDF with JavaScript for node or electron. Prior to 6.0.5, Muhammara PDFParser::CreateFilterForStream in src/deps/PDFWriter/PDFParser.cpp dereferences a null PDFInteger pointer when a PDF stream uses the LZWDecode filter with a DecodeParms...

CVE-2026-125107 Muhammara: NULL pointer dereference in LZWDecode filter when DecodeParms omits EarlyChange key

Muhammara is a node module with c/cpp bindings to modify PDF with JavaScript for node or electron. Prior to 6.0.5, Muhammara PDFParser::CreateFilterForStream in src/deps/PDFWriter/PDFParser.cpp dereferences a null PDFInteger pointer when a PDF stream uses the LZWDecode filter with a DecodeParms...

EUVD-2026-120461

Muhammara is a node module with c/cpp bindings to modify PDF with JavaScript for node or electron. Prior to 6.0.5, Muhammara PDFParser::CreateFilterForStream in src/deps/PDFWriter/PDFParser.cpp dereferences a null PDFInteger pointer when a PDF stream uses the LZWDecode filter with a DecodeParms...

CVE-2026-125107

The Muhammara node module, which provides c/cpp bindings for PDF manipulation in Node.js or Electron, is vulnerable to a NULL pointer dereference in PDFParser::CreateFilterForStream(). This occurs when a PDF stream uses the LZWDecode filter with a /DecodeParms dictionary that omits the EarlyChang...