CVE-2026-127125

P-Net versions prior to 1.0.4 are vulnerable to a NULL pointer dereference during the handling of fragmented responses in an RPC session. The issue occurs because the software fails to verify the existence of an Application Relationship before processing a resent response fragment. Specifically, ...

libreswan security update

An update is available for libreswan. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the...

CVE-2026-128239

GPAC versions through 26.07.0 are vulnerable to a NULL pointer dereference within the MPEG-4 Form spatial-constraint handlers located in src/compositor/mpeg4_form.c. This flaw occurs due to unchecked group lookups when processing a crafted XMT scene where Form constraints reference a non-existent...

EUVD-2026-125053

GPAC through 26.07.0 contains a NULL pointer dereference vulnerability in the MPEG-4 Form spatial-constraint handlers in src/compositor/mpeg4form.c that lets attackers crash the process via unchecked group lookups. Attackers can supply a crafted XMT scene whose Form constraints reference a...

practice-22-23

Project To run: ./script.sh GitHub repository - https://github.com/LaCinquette/practice-22-23 Progress 1. For vulnerability research I chose the FFmpeg project. I found a commit that met the requirements, namely: Matched the type CWE-476 - null pointer dereference 2. Created a Dockerfile in which...

tpwn

tpwn cve-2015-???? poc os x 10.10.5 kernel local privilege escalation vulnerability got burned in 10.11 full writeup etason shout out @ unthreadedjb 4 hax Install NULLGuard to protect yourself against tpwn and other NULL Pointer Deference bugs...

CVE-2026-63686

ACW3 — CVE-2026-63686 Apache modxml2enc DoS Target environment and demo material for INF2005 ACW3: a NULL pointer dereference in modxml2enc Apache HTTP Server ≤ 2.4.68, fixed in 2.4.69 triggered by a proxied response whose charset conversion partially succeeds, then fails. CVSS 7.5 High — denial ...

CVE-2026-16659

The MCUboot bootloader contains a pre-authentication NULL pointer dereference within the bs_upload() handler in boot/boot_serial/src/boot_serial.c. The vulnerability occurs because the fap pointer is initialized to NULL and only assigned via flash_area_open(). Specific validation failures (malfor...

EUVD-2026-124789

MCUboot's serial-recovery image-upload handler bsupload in boot/bootserial/src/bootserial.c declares const struct flasharea fap = NULL and assigns it only via flashareaopen part-way through the function. Two early validation failures goto outinvaliddata — a CBOR map that fails to decode, or an...

CVE-2026-16659 Pre-authentication NULL pointer dereference in MCUboot serial-recovery image upload (encrypted-image builds)

MCUboot's serial-recovery image-upload handler bsupload in boot/bootserial/src/bootserial.c declares const struct flasharea fap = NULL and assigns it only via flashareaopen part-way through the function. Two early validation failures goto outinvaliddata — a CBOR map that fails to decode, or an...

CVE-2026-16659 Pre-authentication NULL pointer dereference in MCUboot serial-recovery image upload (encrypted-image builds)

MCUboot's serial-recovery image-upload handler bsupload in boot/bootserial/src/bootserial.c declares const struct flasharea fap = NULL and assigns it only via flashareaopen part-way through the function. Two early validation failures goto outinvaliddata — a CBOR map that fails to decode, or an...

PT-2026-146111

MCUboot's serial-recovery image-upload handler bs upload in boot/boot serial/src/boot serial.c declares const struct flash area fap = NULL and assigns it only via flash area open part-way through the function. Two early validation failures goto out invalid data — a CBOR map that fails to decode, ...

cve-2026-86547-mrubyc-op-enter

CVE-2026-86547 — mrubyc OPENTER NULL Pointer Dereference Standalone proof of concept for CVE-2026-86547 , a NULL pointer dereference in mrubyc's openter handler through release 4.0.0. Summary mrubyc is a lightweight Ruby implementation for embedded systems. Its bytecode VM keeps the current...

d-os-descriptor

d-os-descriptor Summary The USB Gadget Subsystem includes security issues in the OS descriptor handling section of compositesetup function composite.c. Processing of properly crafted control transfer request messages result in device crash due to null pointer dereference or memory corruption...

krb5: Unauthenticated KDC NULL pointer dereference KDC DoS via crafted PKINIT pre-auth request

If a KDC is configured to allow PKINIT authentication, an unauthenticated attacker can trigger a null pointer dereference, causing the process to terminate...

krb5: MIT krb5 kadmind authenticated DoS exploiting dereference of null policy name pointers

The policy RPC stubs in kadmin/server/serverstubs.c in MIT Kerberos 5 aka krb5 1.5.3 and later do not reject a NULL policy name decoded by xdrnullstring, which allows remote authenticated users to cause a denial of service kadmind crash via NULL pointer dereference by sending a policy request wit...

krb5: krb5: Denial of Service via malformed PAC in S4U2Proxy requests

A flaw was found in krb5. This vulnerability allows a compromised or malicious cross-realm trusted Key Distribution Center KDC to cause a Denial of Service DoS. By sending an S4U2Proxy delegation request containing a malformed client name within a Privilege Attribute Certificate PAC, an attacker...

krb5: krb5: Denial of Service via crafted forwarded credentials

A flaw was found in krb5. An authenticated remote attacker can cause a Denial of Service DoS by sending specially crafted forwarded credentials containing mismatched credential entries. This improper handling triggers a null pointer dereference, causing the service to crash and become unavailable...

USN-9070-1: Hiredis vulnerability

It was discovered that Hiredis did not check the return values of memory allocation functions in some places, leading to a NULL pointer dereference. An attacker could possibly use this issue to cause applications using Hiredis to crash, resulting in a denial of service...

USN-9070-1 hiredis vulnerability

It was discovered that Hiredis did not check the return values of memory allocation functions in some places, leading to a NULL pointer dereference. An attacker could possibly use this issue to cause applications using Hiredis to crash, resulting in a denial of service...