105564 matches found
CVE-2026-111128
The Assimp library, in versions through 6.0.5 , is vulnerable to a NULL pointer dereference within the Ogre3D importer . The flaw exists in OgreStructs.cpp, where the application fails to validate bone indices. An attacker can trigger a crash of the host process by providing a crafted .mesh and ....
CVE-2026-111128
Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone indices in OgreStructs.cpp. Attackers can supply a crafted .mesh and .skeleton file referencing a missing bone, causing BoneById to return...
CVE-2026-111128
Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone indices in OgreStructs.cpp. Attackers can supply a crafted .mesh and .skeleton file referencing a missing bone, causing BoneById to return...
CVE-2026-111128 Assimp through 6.0.5 NULL Pointer Dereference via Ogre Importer Bone Assignment
Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone indices in OgreStructs.cpp. Attackers can supply a crafted .mesh and .skeleton file referencing a missing bone, causing BoneById to return...
EUVD-2026-102359
Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone indices in OgreStructs.cpp. Attackers can supply a crafted .mesh and .skeleton file referencing a missing bone, causing BoneById to return...
CVE-2026-110659
A flaw was found in elfio. This vulnerability allows an attacker to cause a Denial of Service DoS by crashing applications that process untrusted binaries. By supplying a specially crafted Executable and Linkable Format ELF file containing an invalid relocation section link, an attacker triggers ...
CVE-2026-98399
A flaw was found in the Linux kernel. On s390 IBM Z systems booted without an Initial Program Load IPL parameter block, such as during direct kernel boot, the kernel does not verify the parameter block before dereferencing it during dump operations. A local privileged user could trigger this...
CVE-2026-98400
A flaw was found in the Linux kernel's s390 architecture. On systems booted without an Initial Program Load IPL parameter block, such as direct virtual machine boots, the kernel crash shutdown handler unconditionally dereferences an uninitialized pointer when preparing crash data. If a crash...
MZ Automation GmbH libIEC61850: Input validation error vulnerability
MZ Automation GmbH’s libIEC61850 versions prior to 1.6.2 have security vulnerabilities. The vulnerability stems from the alternateArrayAccess function in src/mms/isomms/server/mmsreadservice.c. When numberOfElements is greater than 0, the function does not validate the range of the sub-array. As ...
Netcore NR256CN: Improper exception handling vulnerability
Netcore NR256CN versions 1.5.140116 and earlier have a vulnerability related to improper exception handling. This vulnerability stems from a null pointer dereferencing in the Boa web server’s userauth function. Unauthenticated attackers can exploit this vulnerability by sending aBasic Authorizati...
FreeRDP has vulnerabilities related to improper exception handling
Versions of FreeRDP prior to 3.32.0 have a vulnerability related to improper exception handling. This vulnerability stems from a null pointer dereferencing in the websocket transport. When a malicious gateway sends a zero-length ping, websocketreplypong will pass an empty stream to...
Portable SDK for UPnP Devices – Improper exception handling leads to vulnerabilities
The Portable SDK for UPnP Devices versions prior to 2.0.2 have a vulnerability related to improper exception handling. This vulnerability arises from the ixmlNodecompare function, which directly passes the nullable fields nodeValue, namespaceURI, prefix, and localName to the strcmp function. When...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid dereferencing a NULL pointer REASON Although unlikely, drmatomicgetnewconnectorstate or drmatomicgetoldconnectorstate may return NULL. SOLUTION Check the return value before dereferencing the variable...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: clk: xilinx: vcu: Unregistering pllpost only if registered correctly If the registration of pllpost fails, it will be set to NULL or ERR. Unregistering pllpost will also fail, with the following call trace: “Unable to handle kern...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: power: supply: cpcap-charger: Fixed the null check for powersupplygetbyname. In the cpcapusbdetect function, the powersupplygetbyname function may return NULL instead of an error pointer. To prevent potential null pointer...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: rcv: Prevent NULL pointer dereferencing in machinekexecprepare A NULL pointer dereferencing issue was identified in riscv’s machinekexecprepare. In this function, image-segmenti.buf might be NULL, and it may be copied without...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: selinux: Rejecting an unclaimed class value in securitygetclasses securitygetclasses sizes an array using pclasses.nprim and fills it with the value -1. Therefore, a class value that is never defined by the policy will result in ...
Astra Linux – vulnerability in linux-6.1, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: firmware: armffa: Check for NULL FF-A ID table while driver registration The bus match callback assumes that every FF-A driver provides an idtable and dereferences it unconditionally. Enforce that contract at registration time so...