87735 matches found
UBUNTU-CVE-2026-121402
FreeRDP before 3.32.2 contains a NULL pointer dereference vulnerability that allows malicious RDP servers to crash xfreerdp clients by sending a zero-width RDPGFX ResetGraphics PDU. The failed resize in gdiresizeex leaves the primary display null without ending the session, so a later bitmap upda...
UBUNTU-CVE-2026-121401
FreeRDP before 3.32.2 contains a denial of service vulnerability where rdgprocesspacket dispatches a PKTTYPEEXTENDEDAUTHMSG without verifying negotiated mode or auth context. A malicious or compromised RD Gateway can send the extended-auth packet before tunnel authentication, triggering a...
EUVD-2026-115875
A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of service...
CVE-2026-43603
A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of service...
CVE-2026-43603
A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of service...
CVE-2026-43603
A NULL pointer dereference vulnerability exists in the Linux GPU driver . This flaw could lead to a kernel crash , resulting in a denial of service (DoS) . The vulnerability is associated with CWE-476 and has been assigned a CVSS 4.0 score of 6.9. No specific exploit information or remediation st...
kernel: Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error
A flaw was found in the Linux kernel's Bluetooth Host Controller Interface HCI Universal Asynchronous Receiver/Transmitter UART driver. When the hciregisterdev function fails, a flag indicating protocol initialization is not properly cleared. This oversight allows incoming UART data to be process...
EUVD-2026-115934
FreeRDP before 3.32.2 contains a NULL pointer dereference vulnerability that allows malicious RDP servers to crash xfreerdp clients by sending a zero-width RDPGFX ResetGraphics PDU. The failed resize in gdiresizeex leaves the primary display null without ending the session, so a later bitmap upda...
CVE-2026-121402
FreeRDP versions before 3.32.2 are susceptible to a NULL pointer dereference vulnerability. A malicious RDP server can crash xfreerdp clients by sending a zero-width RDPGFX ResetGraphics PDU. The flaw occurs because a failed resize in gdi_resize_ex leaves the primary display as null without termi...
CVE-2026-121402 FreeRDP before 3.32.2 X11 Client Crash via Zero-Width RDPGFX ResetGraphics
FreeRDP before 3.32.2 contains a NULL pointer dereference vulnerability that allows malicious RDP servers to crash xfreerdp clients by sending a zero-width RDPGFX ResetGraphics PDU. The failed resize in gdiresizeex leaves the primary display null without ending the session, so a later bitmap upda...
CVE-2026-121402 FreeRDP before 3.32.2 X11 Client Crash via Zero-Width RDPGFX ResetGraphics
FreeRDP before 3.32.2 contains a NULL pointer dereference vulnerability that allows malicious RDP servers to crash xfreerdp clients by sending a zero-width RDPGFX ResetGraphics PDU. The failed resize in gdiresizeex leaves the primary display null without ending the session, so a later bitmap upda...
EUVD-2026-115933
FreeRDP before 3.32.2 contains a denial of service vulnerability where rdgprocesspacket dispatches a PKTTYPEEXTENDEDAUTHMSG without verifying negotiated mode or auth context. A malicious or compromised RD Gateway can send the extended-auth packet before tunnel authentication, triggering a...
CVE-2026-121401 FreeRDP before 3.32.2 Denial of Service via RD Gateway extended-auth packet
FreeRDP before 3.32.2 contains a denial of service vulnerability where rdgprocesspacket dispatches a PKTTYPEEXTENDEDAUTHMSG without verifying negotiated mode or auth context. A malicious or compromised RD Gateway can send the extended-auth packet before tunnel authentication, triggering a...
CVE-2026-121401
FreeRDP versions before 3.32.2 are vulnerable to a Denial of Service (DoS) condition. The issue resides in the rdg_process_packet function, which dispatches a PKT_TYPE_EXTENDED_AUTH_MSG without properly verifying the auth context or negotiated mode. This allows a malicious or compromised RD Gatew...
CVE-2026-121390
The FreeRDP software (versions 3.0.0 before 3.32.2) built with WITH_AAD=ON is vulnerable to a Null Pointer Crash . The root cause is located in the ARM gateway response parser , which incorrectly accepts a missing or non-string redirectedServerCert field and passes a null buffer to the certificat...
CVE-2026-121390 FreeRDP before 3.32.2 Null Pointer Crash via ARM Gateway Response
FreeRDP 3.0.0 before 3.32.2 built with WITHAAD=ON contains a reachable assertion because its ARM gateway response parser accepts a missing or non-string redirectedServerCert field and passes a null buffer to the certificate parser. A malicious or malformed user-selected gateway can return such a...
CVE-2026-121390 FreeRDP before 3.32.2 Null Pointer Crash via ARM Gateway Response
FreeRDP 3.0.0 before 3.32.2 built with WITHAAD=ON contains a reachable assertion because its ARM gateway response parser accepts a missing or non-string redirectedServerCert field and passes a null buffer to the certificate parser. A malicious or malformed user-selected gateway can return such a...
kernel: Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error
A flaw was found in the Linux kernel's Bluetooth Host Controller Interface HCI Universal Asynchronous Receiver/Transmitter UART driver. When the hciregisterdev function fails, a flag indicating protocol initialization is not properly cleared. This oversight allows incoming UART data to be process...
DEBIAN-CVE-2026-99257
In the Linux kernel, the following vulnerability has been resolved: gpio: shared: gracefully handle no-device lookup of shared GPIOs We use platform lookup tables for shared GPIOs. This mechanism needs a struct device to work so fwnode-based lookup with no device associated currently causes a...
CVE-2026-99257
In the Linux kernel, the following vulnerability has been resolved: gpio: shared: gracefully handle no-device lookup of shared GPIOs We use platform lookup tables for shared GPIOs. This mechanism needs a struct device to work so fwnode-based lookup with no device associated currently causes a...