CVE-2026-90573

A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gfsgmfurldel of the file scenegraph/vrmltools.c of the component MP4Box. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit is publicly...

CVE-2026-90576

A security vulnerability has been detected in GPAC up to f1219cde. Affected is the function gfnodelistaddchild of the file scenegraph/basescenegraph.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The explo...

CVE-2026-88339

A NULL pointer dereference vulnerability exists in the gfsgvrmlfieldclone function of GPAC 2d7da22e 26.08-DEV. The vulnerability occurs when cloning a PROTO default SFImage field with a NULL source pointer. An attacker can provide a specially crafted input file that triggers the condition,...

CVE-2026-90792

A flaw has been found in GPAC up to f1219cde. This issue affects the function gfnodelistgetchild of the file scenegraph/basescenegraph.c of the component MP4Box. This manipulation of the argument Target causes null pointer dereference. The attack is possible to be carried out remotely. The exploi...

CVE-2026-90609

A vulnerability has been found in GPAC up to f1219cde. The impacted element is an unknown function of the file scenegraph/vrmltools.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The exploit has been...

CVE-2025-60469

A NULL pointer dereference in the gfac4presentationchmode function /mediatools/avparsers.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...

CVE-2025-60489

A NULL pointer dereference in the dasherinserttimelineentry function /filters/dasher.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

CVE-2025-60479

A NULL pointer dereference in the StatSFVec2f function /scenemanager/scenestats.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-4 file...

CVE-2026-111736

P-Net before 1.0.3 dereferences a NULL AR pointer in pffspmcmreadind when handling an implicit read request without a valid target AR UUID for a user specific record index, if the application has registered a read callback. A remote unauthenticated attacker can send such a request to crash the...

CVE-2026-111736

P-Net before 1.0.3 dereferences a NULL AR pointer in pffspmcmreadind when handling an implicit read request without a valid target AR UUID for a user specific record index, if the application has registered a read callback. A remote unauthenticated attacker can send such a request to crash the...

EUVD-2026-113012

P-Net before 1.0.3 dereferences a NULL AR pointer in pffspmcmreadind when handling an implicit read request without a valid target AR UUID for a user specific record index, if the application has registered a read callback. A remote unauthenticated attacker can send such a request to crash the...

CVE-2026-111736 NULL pointer dereference on implicit read of user specific record index

P-Net before 1.0.3 dereferences a NULL AR pointer in pffspmcmreadind when handling an implicit read request without a valid target AR UUID for a user specific record index, if the application has registered a read callback. A remote unauthenticated attacker can send such a request to crash the...

CVE-2026-111736

The software P-Net versions prior to 1.0.3 is vulnerable to a NULL pointer dereference within the pf_fspm_cm_read_ind() function. This occurs when the system processes an implicit read request that lacks a valid target AR UUID for a user-specific record index, provided the application has registe...

CVE-2026-111733

The P-Net software (versions prior to 1.0.3 ) is vulnerable to a NULL pointer dereference when processing implicit read requests. This occurs when a request lacks a valid target AR UUID for a record index requiring an AR (specifically indices 0xE000-0xEFFF and expected slot/subslot identification...

CVE-2026-111733 NULL pointer dereference on implicit read of AR specific record index

P-Net before 1.0.3 dereferences a NULL AR pointer when handling an implicit read request without a valid target AR UUID for a record index that requires an AR AR specific indices 0xE000-0xEFFF, and the expected identification data of a slot or subslot. A remote unauthenticated attacker can send...

CVE-2026-99134

A flaw was found in the Linux kernel's mac802154 wireless networking subsystem. This flaw allows an attacker within radio range to cause a Denial of Service DoS by crashing the system. Due to missing synchronization between device association routines and response processing, a race condition can...

CVE-2026-109679

A flaw was found in FreeRDP. A malicious or compromised remote desktop gateway can cause a Denial of Service DoS by returning a response with an empty body during connection negotiation. When processing the response from an Azure Resource Manager ARM endpoint, the client fails to verify that the...

Security Bulletin: IBM MQ is affected by a denial of service vulnerability (CVE-2026-12155)

Summary IBM MQ has addressed a denial of service vulnerability caused by sending specially crafted multicast status messages that trigger a NULL pointer Vulnerability Details CVEID:CVE-2026-12155 DESCRIPTION: IBM MQ could allow an authenticated attacker to cause a denial of service by sending...

CVE-2026-99194

A flaw was found in the Linux kernel's Aeroflex Ethernet driver. During device probing, the driver attempts to attach the physical network interface before its network device operations are assigned. A local user can exploit this condition on systems with network traffic shaping enabled to trigge...

CVE-2026-99126

A flaw was found in the Linux kernel's s390 CTCM Channel-to-Channel driver. A denial of service DoS can occur when the driver processes invalid Exchange Station Identification XID data during channel negotiation. If a peer XID is missing or a channel pairing mismatch occurs, the driver attempts t...