CVE-2026-64227: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ACPI: driver: Check ACPICOMPANION against NULL during probe Since every platform driver can be forced to match a device that doesn't match its list of device IDs because of devicematchdriveroverride, platform drivers that rely on...

CVE-2026-64220: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: device property: set fwnode-secondary to NULL in fwnodeinit If a firmware node is allocated on the stack for instance: temporary software node whose life-time we control or on the heap - but using a non-zeroing allocation functio...

CVE-2026-45816: NULL Pointer Dereference

NULL Pointer Dereference vulnerability in Apache NimBLE in LE Long Term Key Request event. This requires disabled asserts otherwise assert would trigger before NULL dereference and bogus or misbehaving controller, thus severity is low. This issue affects Apache NimBLE: through 1.9.0. Users are...

CLSA-2026-1784736863 ImageMagick: Fix of 3 CVEs

CVE-2026-61857: check ResizeQuantumMemory return value in ParseEntities magick/xml-tree.c to avoid a NULL-pointer dereference - CVE-2026-61863: destroy the huffmanimage clone on temp-file open failure in WriteGROUP4Image coders/tiff.c to fix a memory leak - CVE-2026-61870: relinquish pixelinfo...

CVE-2026-50103

A NULL pointer dereference in the L2 GOOSE and R-GOOSE shared parser, which may allow a network-adjacent attacker to crash a subscribing application by sending a crafted GOOSE frame containing a malformed TLV value...

CVE-2026-50032

A NULL pointer dereference in the MMS Write Named Variable List handler, which may allow a network adjacent attacker to crash the server by sending a WriteRequest with an empty listOfData field...

CVE-2026-50032

A NULL pointer dereference in the MMS Write Named Variable List handler, which may allow a network adjacent attacker to crash the server by sending a WriteRequest with an empty listOfData field...

CVE-2026-50103

A NULL pointer dereference in the L2 GOOSE and R-GOOSE shared parser, which may allow a network-adjacent attacker to crash a subscribing application by sending a crafted GOOSE frame containing a malformed TLV value...

CVE-2026-50103

A NULL pointer dereference in the L2 GOOSE and R-GOOSE shared parser, which may allow a network-adjacent attacker to crash a subscribing application by sending a crafted GOOSE frame containing a malformed TLV value...

EUVD-2026-48396

A NULL pointer dereference in the L2 GOOSE and R-GOOSE shared parser, which may allow a network-adjacent attacker to crash a subscribing application by sending a crafted GOOSE frame containing a malformed TLV value...

PT-2026-64177

Name of the Vulnerable Software and Affected Versions MZ Automation libIEC61850 affected versions not specified Description A NULL pointer dereference occurs in the L2 GOOSE and R-GOOSE shared parser. This issue allows a network-adjacent attacker to crash a subscribing application by sending a...

CVE-2026-50032: NULL Pointer Dereference

A NULL pointer dereference in the MMS Write Named Variable List handler, which may allow a network adjacent attacker to crash the server by sending a WriteRequest with an empty listOfData field...

PT-2026-64176

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A NULL pointer dereference occurs in the MMS Write Named Variable List handler. A network adjacent attacker can cause the server to crash by sending a WriteReque...

Alibaba Cloud Linux 3 : 0223: openssl (ALINUX3-SA-2026:0223)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0223 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-28390: Issue summary: During processing of...

CVE-2026-50103: Improper Handling of Syntactically Invalid Structure

A NULL pointer dereference in the L2 GOOSE and R-GOOSE shared parser, which may allow a network-adjacent attacker to crash a subscribing application by sending a crafted GOOSE frame containing a malformed TLV value...

CLSA-2026-1784734364 ImageMagick: Fix of 3 CVEs

CVE-2026-61857: check ResizeQuantumMemory return value in ParseEntities magick/xml-tree.c to avoid a NULL-pointer dereference - CVE-2026-61863: destroy the huffmanimage clone on temp-file open failure in WriteGROUP4Image coders/tiff.c to fix a memory leak - CVE-2026-61870: relinquish pixelinfo...

CLSA-2026-1784734011 ImageMagick: Fix of 3 CVEs

CVE-2026-61857: check ResizeQuantumMemory return value in ParseEntities magick/xml-tree.c to avoid a NULL-pointer dereference - CVE-2026-61863: destroy the huffmanimage clone on temp-file open failure in WriteGROUP4Image coders/tiff.c to fix a memory leak - CVE-2026-61870: relinquish pixelinfo...

AZL-92946 CVE-2026-55717 affecting package unbound for versions less than 1.25.2-1

In NLnet Labs Unbound 1.10.0 up to and including 1.25.1, when 'serve-expired: yes' is set together with a 'response-ip: redirect' /'response-ip-data: CNAME ' rule or the RPZ 'rpz-cname-override' equivalent, a remote client who controls any delegated domain can crash the daemon. The...

ALPINE-CVE-2026-55717

In NLnet Labs Unbound 1.10.0 up to and including 1.25.1, when 'serve-expired: yes' is set together with a 'response-ip: redirect' /'response-ip-data: CNAME ' rule or the RPZ 'rpz-cname-override' equivalent, a remote client who controls any delegated domain can crash the daemon. The...

CVE-2026-55717

In NLnet Labs Unbound 1.10.0 up to and including 1.25.1, when 'serve-expired: yes' is set together with a 'response-ip: redirect' /'response-ip-data: CNAME ' rule or the RPZ 'rpz-cname-override' equivalent, a remote client who controls any delegated domain can crash the daemon. The...