PT-2026-81299

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description A NULL pointer dereference can occur in server or client configurations where RFC7250 Raw Public Keys RPKs are enabled and only a private key is configured locally without an associated...

EulerOS Virtualization 2.13.0 : shim (EulerOS-SA-2026-3239)

According to the versions of the shim package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if...

Linux Distros Unpatched Vulnerability : CVE-2026-78148

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in ggml-org llama.cpp bec4772f6. This affects the function rpcserver::graphcompute of the file ggml/src/ggml-rpc/ggml-rpc.cpp of...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero filehandle version count CVE-2026-53392 In the Linux kernel, the following vulnerability has been resolved: nfsd: reset write verifier on deferred writeback errors CVE-2026-53393 In th...

CVE-2026-14457: NULL Pointer Dereference

Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...

PT-2026-81494

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.9 iOS versions prior to 26.5 iPadOS versions prior to 18.7.9 iPadOS versions prior to 26.5 Description A null pointer dereference occurs due to insufficient input validation, which may allow an application to cause...

UBUNTU-CVE-2026-14457

Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...

PT-2026-81375

The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp.c reconstructs a session handle and PDU id from the uid field of a CALLRESULT message. In ocpp process server msg the code calls atoistrtok ruid, "-", &tmp without checking the strtok r return value. When the server-supplied uid is empty or contains...

CVE-2026-14457

Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...

CVE-2026-63076: NULL Pointer Dereference

Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted message can contain a parameter of a different type, which is then dereferenced as an invalid...

PT-2026-81386

Name of the Vulnerable Software and Affected Versions NVIDIA DGX Spark affected versions not specified Description A flaw in the system firmware allows a privileged attacker to trigger a NULL pointer dereference, which occurs when a program attempts to read from or write to a memory address that ...

Linux Distros Unpatched Vulnerability : CVE-2026-63076

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before...

OpenSSL 3.4.0 < 3.4.7 Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 3.4.7. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.4.7 advisory. - Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and n...

EulerOS Virtualization 2.13.1 : shim (EulerOS-SA-2026-3199)

According to the versions of the shim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if...

PT-2026-81441

Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interacti...

CVE-2026-14457: NULL Pointer Dereference

Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...

CVE-2026-63076: NULL Pointer Dereference

Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted message can contain a parameter of a different type, which is then dereferenced as an invalid...

EulerOS Virtualization 2.13.0 : krb5 (EulerOS-SA-2026-3217)

According to the versions of the krb5 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In MIT Kerberos 5 aka krb5 before 1.22.3, there is a NULL pointer dereference if an application calls gssacceptseccontext on a system...

SUSE-SU-2026:23309-1 Security update for libarchive

This update for libarchive fixes the following issues: - Fix creation of temporary files in target directory bsc1254340 - Fix out-of-bounds buffer overrun when using pHLEVELOFFSET bsc1254341 - Fix buffer overrun in archivele32dec when reading truncated 7zip headers bsc1254342 - Fix NULL pointer...

OPENSUSE-SU-2026:21631-1 Security update for libarchive

This update for libarchive fixes the following issues: - Fix creation of temporary files in target directory bsc1254340 - Fix out-of-bounds buffer overrun when using pHLEVELOFFSET bsc1254341 - Fix buffer overrun in archivele32dec when reading truncated 7zip headers bsc1254342 - Fix NULL pointer...