PT-2026-142457

Security vulnerability affects the vim package. NULL Pointer Dereference in GitHub repository vim/vim prior to 8...

Linux Distros Unpatched Vulnerability : CVE-2026-119760

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sniproxy through 0.7.0 contains a NULL pointer dereference vulnerability in resolvcancel that allows remote unauthenticated attackers to crash the daemon by...

PT-2026-142196

Security vulnerability affects the vim package. NULL Pointer Dereference in GitHub repository vim/vim prior to 9...

CVE-2026-62966

ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350. Prior to version 3.11.2, the multipart parser in src/WebRequest.cpp frees itemBuffer and sets it to NULL when BOUNDARYORDATA matches the closing boundary of a file part, before confirming...

CVE-2026-59993

Picotls is a TLS protocol library that allows users select different crypto backends based on their use case. In affected revisions through 44bc503, when picotls is used as a client-side TLS stack, a peer can send a HelloRetryRequest followed by a spoofed Hello message that causes a null-pointer...

Security Bulletin: IBM CloudPak for Data Scheduling Service is vulnerable to CVE-2024-36620, CVE-2025-54410, CVE-2026-92542, CVE-2026-92543.

Summary Multiple vulnerabilities in the Docker/Moby dependency affect IBM Cloud Pak for Data Scheduling Service. The fixes are included in Scheduling Service 1.61.10 for IBM Cloud Pak for Data 5.3.1 and Scheduling Service 2.0.6 for IBM Cloud Pak for Data 5.4.0. Vulnerability Details...

CVE-2026-59993 Picotls has NULL pointer dereference during handshake, when running as a client

Picotls is a TLS protocol library that allows users select different crypto backends based on their use case. In affected revisions through 44bc503, when picotls is used as a client-side TLS stack, a peer can send a HelloRetryRequest followed by a spoofed Hello message that causes a null-pointer...

EUVD-2026-114509

Picotls is a TLS protocol library that allows users select different crypto backends based on their use case. In affected revisions through 44bc503, when picotls is used as a client-side TLS stack, a peer can send a HelloRetryRequest followed by a spoofed Hello message that causes a null-pointer...

CVE-2026-59993

Picotls is a TLS protocol library that allows users select different crypto backends based on their use case. In affected revisions through 44bc503, when picotls is used as a "client-side TLS stack", a peer can send a "HelloRetryRequest" followed by a "spoofed Hello message" that causes a...

CVE-2026-59993 Picotls has NULL pointer dereference during handshake, when running as a client

Picotls is a TLS protocol library that allows users select different crypto backends based on their use case. In affected revisions through 44bc503, when picotls is used as a client-side TLS stack, a peer can send a HelloRetryRequest followed by a spoofed Hello message that causes a null-pointer...

CVE-2026-59993

The Picotls TLS protocol library is vulnerable to a null-pointer dereference in revisions through 44bc503 when utilized as a client-side TLS stack . An attacker can trigger this by sending a HelloRetryRequest followed by a spoofed Hello message , which can terminate the consuming process and resu...

CVE-2026-62966 ESPAsyncWebServer multipart parser has null-pointer write

ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350. Prior to version 3.11.2, the multipart parser in src/WebRequest.cpp frees itemBuffer and sets it to NULL when BOUNDARYORDATA matches the closing boundary of a file part, before confirming...

CVE-2026-62966

ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350. Prior to version 3.11.2, the multipart parser in "src/WebRequest.cpp" frees "itemBuffer" and sets it to NULL when "BOUNDARYORDATA" matches the closing boundary of a file part, before...

CVE-2026-62966 ESPAsyncWebServer multipart parser has null-pointer write

ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350. Prior to version 3.11.2, the multipart parser in src/WebRequest.cpp frees itemBuffer and sets it to NULL when BOUNDARYORDATA matches the closing boundary of a file part, before confirming...

CVE-2026-62966

The ESPAsyncWebServer library (for ESP32, ESP8266, RP2040, and RP2350) contains a null pointer write vulnerability in the multipart parser within src/WebRequest.cpp prior to version 3.11.2 . The flaw occurs because _itemBuffer is freed and set to NULL when a file part boundary is matched, but _it...

EUVD-2026-114469

ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350. Prior to version 3.11.2, the multipart parser in src/WebRequest.cpp frees itemBuffer and sets it to NULL when BOUNDARYORDATA matches the closing boundary of a file part, before confirming...

CVE-2026-62298

mouse07410/asn1c is an ASN.1 compiler. Prior to 1.2.5, OPEN TYPE decoding can dereference an unallocated member pointer and crash the consuming program. OPENTYPEaperget in OPENTYPEaper.c, OPENTYPEberget in OPENTYPEber.c, OPENTYPEoerget in OPENTYPEoer.c, and OPENTYPEuperget in OPENTYPEuper.c share...

CVE-2026-119842

A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted subtitle file, the parser may dereference a NULL pointer, causing the application to crash when a user opens or plays media with a malformed MicroDVD .sub subtitle file...

CVE-2026-120046

Nezha 2.0.0 before 2.4.0 contains a NULL pointer dereference vulnerability in ServiceSentinel.loadTodayStats that allows authenticated users to crash the dashboard by deleting a service. Attackers can delete their own service via POST /api/v1/batch-delete/service, leaving orphaned servicehistorie...

CVE-2026-119728

A flaw was found in the H.264 video parser in gst-plugins-bad. When processing a specially crafted H.264 video file or network stream with malformed Multiview MVC Sequence Parameter Set data, the parser can dereference a NULL pointer during the cleanup of partially allocated internal structures...