CVE-2026-24263

NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause a NULL pointer dereference. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, denial of service, information disclosure, and data...

CVE-2026-24263

NVIDIA DGX Spark is affected by a NULL pointer dereference vulnerability in its system firmware . A privileged local attacker can trigger the flaw, potentially leading to code execution, privilege escalation, denial of service, information disclosure, and data tampering . The CVSS 3.1 score is 8....

EUVD-2026-65598

The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp.c reconstructs a session handle and PDU id from the uid field of a CALLRESULT message. In ocppprocessservermsg the code calls atoistrtokruid, "-", &tmp without checking the strtokr return value. When the server-supplied uid is empty or contains no -...

CVE-2026-13217 NULL-pointer dereference in Zephyr OCPP CALLRESULT parsing via unchecked strtok_r/atoi

The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp.c reconstructs a session handle and PDU id from the uid field of a CALLRESULT message. In ocppprocessservermsg the code calls atoistrtokruid, "-", &tmp without checking the strtokr return value. When the server-supplied uid is empty or contains no -...

CVE-2026-13217

The Zephyr RTOS OCPP 1.6 client in subsys/net/lib/ocpp/ocpp.c contains a NULL-pointer dereference in ocpp_process_server_msg(). When parsing the uid field of a CALLRESULT message, atoi(strtok_r(uid, "-", &tmp)) is called without checking whether strtok_r() returned NULL. A malicious or compromise...

CVE-2026-13217

The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp.c reconstructs a session handle and PDU id from the uid field of a CALLRESULT message. In ocppprocessservermsg the code calls atoistrtokruid, "-", &tmp without checking the strtokr return value. When the server-supplied uid is empty or contains no -...

CVE-2026-13217 NULL-pointer dereference in Zephyr OCPP CALLRESULT parsing via unchecked strtok_r/atoi

The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp.c reconstructs a session handle and PDU id from the uid field of a CALLRESULT message. In ocppprocessservermsg the code calls atoistrtokruid, "-", &tmp without checking the strtokr return value. When the server-supplied uid is empty or contains no -...

Linux kernel security vulnerabilities

A security vulnerability exists in the Linux kernel. It stems from the arcontextrelease function, which dereferences the ctx-ohci pointer before checking whether the asynchronous receive context has been initialized. This can lead to null pointer dereferencing and a system crash...

CVE-2026-55371

A flaw was found in OpenEXR. A vulnerability in the exrattrsetbytes function allows an attacker to trigger a NULL pointer dereference by providing a positive hintlength with a NULL typehint. This can lead to a deterministic crash, resulting in a denial of service DoS, which makes the affected...

EUVD-2023-60605

Nokogiri before 1.14.3 CRuby implementation only, when using the packaged libxml2 bundles libxml2 v2.10.3, which is vulnerable to NULL pointer dereferences in XML Schema processing xmlSchemaFixupComplexType, CVE-2023-28484, and xmlSchemaCheckCOSSTDerivedOK. An attacker who supplies a...

CVE-2023-54354

...

CVE-2023-54354

CVE-2023-54354 has been rejected as a duplicate , but its technical details remain relevant. Nokogiri before 1.14.3 (CRuby implementation only, using the packaged libxml2 v2.10.3 ) is vulnerable to NULL pointer dereferences in XML Schema processing (specifically in xmlSchemaFixupComplexType and x...

CVE-2023-54354

...

CVE-2023-54354 Nokogiri before 1.14.3 Null Pointer Dereference via libxml2

Nokogiri before 1.14.3 CRuby implementation only, when using the packaged libxml2 bundles libxml2 v2.10.3, which is vulnerable to NULL pointer dereferences in XML Schema processing xmlSchemaFixupComplexType, CVE-2023-28484, and xmlSchemaCheckCOSSTDerivedOK. An attacker who supplies a...

CVE-2023-54354

Removed by vendor...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference through checkcertusable in ssl/t1lib.c. An attacker can crash a server or client by negotiating RFC7250 raw public keys and sending the TLS signaturealgorithmscert extension to a peer configured with only a...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference due to insufficient type checking in osslcmpcalcprotection in crypto/cmp/cmpprotect.c. An attacker can crash a CMP server or client by sending a crafted PBM-protected message whose protectionAlg parameter uses t...

[SECURITY] [DLA 4755-1] libvncserver security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4755-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA August 25, 2026 https://wiki.debian.org/LTS -...

AZL-97887 CVE-2026-63076 affecting package edk2 for versions less than 20240524git3e722403cd16-20

Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted message can contain a parameter of a different type, which is then dereferenced as an invalid...

AZL-97674 CVE-2026-63076 affecting package openssl-fips-provider 3.1.2-2

Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted message can contain a parameter of a different type, which is then dereferenced as an invalid...