CVE-2026-120758

A flaw was found in HDF5. An attacker can cause a Denial of Service DoS by convincing a user or application to open a specially crafted HDF5 file. Due to improper handling of corrupted metadata in local heap structures, the library attempts to dereference a NULL pointer during cache operations,...

qt: qt: Denial of Service via NULL pointer dereference during QCborValue to JSON conversion

A flaw was found in Qt. This vulnerability allows an attacker to trigger a Denial of Service DoS by providing specially crafted Concise Binary Object Representation CBOR data. When the application converts this input into JavaScript Object Notation JSON format using QCborValue, a NULL pointer...

SUSE CVE-2026-99220

In the Linux kernel, the following vulnerability has been resolved: asymmetrickeys: reject trust keys without IDs The PKCS8 parser deliberately leaves the asymkeyids payload slot empty. keyorkeyringcommon unconditionally dereferences that slot when a PKCS8 key is supplied to a keyorkeyring...

SUSE CVE-2026-119728

A flaw was found in the H.264 video parser in gst-plugins-bad. When processing a specially crafted H.264 video file or network stream with malformed Multiview MVC Sequence Parameter Set data, the parser can dereference a NULL pointer during the cleanup of partially allocated internal structures...

CVE-2026-115297

NULL Pointer Dereference CWE-476 in the AMQP protocol parser in Packetbeat can lead to denial of service via specially crafted network traffic. An unauthenticated attacker who can send traffic on a network segment that Packetbeat monitors for AMQP can cause a Go runtime panic that terminates the...

CVE-2026-115297

A NULL Pointer Dereference (CWE-476) vulnerability in the AMQP protocol parser of Packetbeat allows an unauthenticated attacker to cause a Go runtime panic , leading to a Denial of Service (DoS) . A single specially crafted packet sent on a monitored network segment is sufficient to terminate the...

EUVD-2026-116077

NULL Pointer Dereference CWE-476 in the AMQP protocol parser in Packetbeat can lead to denial of service via specially crafted network traffic. An unauthenticated attacker who can send traffic on a network segment that Packetbeat monitors for AMQP can cause a Go runtime panic that terminates the...

CVE-2026-115297 NULL Pointer Dereference in Packetbeat Leading to Denial of Service

NULL Pointer Dereference CWE-476 in the AMQP protocol parser in Packetbeat can lead to denial of service via specially crafted network traffic. An unauthenticated attacker who can send traffic on a network segment that Packetbeat monitors for AMQP can cause a Go runtime panic that terminates the...

CVE-2026-115297 NULL Pointer Dereference in Packetbeat Leading to Denial of Service

NULL Pointer Dereference CWE-476 in the AMQP protocol parser in Packetbeat can lead to denial of service via specially crafted network traffic. An unauthenticated attacker who can send traffic on a network segment that Packetbeat monitors for AMQP can cause a Go runtime panic that terminates the...

Packetbeat 8.19.24, 9.4.9, 9.5.6 Security Update (ESA-2026-208)

NULL Pointer Dereference in Packetbeat Leading to Denial of Service NULL Pointer Dereference CWE-476 in the AMQP protocol parser in Packetbeat can lead to denial of service via specially crafted network traffic. An unauthenticated attacker who can send traffic on a network segment that Packetbeat...

AZL-112640 CVE-2026-120758 affecting package hdf5 1.14.6-6

HDF5 through 2.2.0 contains a NULL pointer dereference vulnerability in H5HLunprotect in src/H5HL.c. H5HLprotect pins a single metadata cache entry for a local heap, either the heap prefix or the separate data block, and H5HLunprotect unpins it on the final unprotect. When the metadata cache...

CVE-2026-120758

HDF5 through 2.2.0 contains a NULL pointer dereference vulnerability in H5HLunprotect in src/H5HL.c. H5HLprotect pins a single metadata cache entry for a local heap, either the heap prefix or the separate data block, and H5HLunprotect unpins it on the final unprotect. When the metadata cache...

CVE-2026-120758 NULL Pointer Dereference in H5HL_unprotect via Corrupted File

HDF5 through 2.2.0 contains a NULL pointer dereference vulnerability in H5HLunprotect in src/H5HL.c. H5HLprotect pins a single metadata cache entry for a local heap, either the heap prefix or the separate data block, and H5HLunprotect unpins it on the final unprotect. When the metadata cache...

EUVD-2026-116017

HDF5 through 2.2.0 contains a NULL pointer dereference vulnerability in H5HLunprotect in src/H5HL.c. H5HLprotect pins a single metadata cache entry for a local heap, either the heap prefix or the separate data block, and H5HLunprotect unpins it on the final unprotect. When the metadata cache...

CVE-2026-120758

The HDF5 library (versions through 2.2.0 ) contains a NULL pointer dereference vulnerability in the H5HL_unprotect() function located in src/H5HL.c. The root cause occurs because H5HL_protect() pins a metadata cache entry, but if the metadata cache destroys a corrupted local heap entry, H5HL__prf...

CVE-2026-120758 NULL Pointer Dereference in H5HL_unprotect via Corrupted File

HDF5 through 2.2.0 contains a NULL pointer dereference vulnerability in H5HLunprotect in src/H5HL.c. H5HLprotect pins a single metadata cache entry for a local heap, either the heap prefix or the separate data block, and H5HLunprotect unpins it on the final unprotect. When the metadata cache...

CVE-2026-43603

A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of service...

CVE-2026-121401

FreeRDP before 3.32.2 contains a denial of service vulnerability where rdgprocesspacket dispatches a PKTTYPEEXTENDEDAUTHMSG without verifying negotiated mode or auth context. A malicious or compromised RD Gateway can send the extended-auth packet before tunnel authentication, triggering a...

CVE-2026-121402

FreeRDP before 3.32.2 contains a NULL pointer dereference vulnerability that allows malicious RDP servers to crash xfreerdp clients by sending a zero-width RDPGFX ResetGraphics PDU. The failed resize in gdiresizeex leaves the primary display null without ending the session, so a later bitmap upda...

DEBIAN-CVE-2026-121402

FreeRDP before 3.32.2 contains a NULL pointer dereference vulnerability that allows malicious RDP servers to crash xfreerdp clients by sending a zero-width RDPGFX ResetGraphics PDU. The failed resize in gdiresizeex leaves the primary display null without ending the session, so a later bitmap upda...