EUVD-2026-88059

A security flaw has been discovered in Trusted Domain Project OpenARC up to 1.0.0.Beta1. Impacted is the function arcparsecanont in the library libopenarc/arc-canon.c of the component libopenarc. The manipulation results in null pointer dereference. The attack may be launched remotely. The exploi...

CVE-2026-100895 Trusted Domain Project OpenARC libopenarc arc-canon.c arc_parse_canon_t null pointer dereference

A security flaw has been discovered in Trusted Domain Project OpenARC up to 1.0.0.Beta1. Impacted is the function arcparsecanont in the library libopenarc/arc-canon.c of the component libopenarc. The manipulation results in null pointer dereference. The attack may be launched remotely. The exploi...

CVE-2026-100895 Trusted Domain Project OpenARC libopenarc arc-canon.c arc_parse_canon_t null pointer dereference

A security flaw has been discovered in Trusted Domain Project OpenARC up to 1.0.0.Beta1. Impacted is the function arcparsecanont in the library libopenarc/arc-canon.c of the component libopenarc. The manipulation results in null pointer dereference. The attack may be launched remotely. The exploi...

CVE-2026-100890 Trusted Domain Project OpenDMARC SPF Parser opendmarc_spf.c opendmarc_spf_ipv6_explode null pointer dereference

A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarcspfipv6explode in the library libopendmarc/opendmarcspf.c of the component SPF Parser. This manipulation of the argument cp causes null pointer dereference. It is possibl...

EUVD-2026-88054

A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarcspfipv6explode in the library libopendmarc/opendmarcspf.c of the component SPF Parser. This manipulation of the argument cp causes null pointer dereference. It is possibl...

CVE-2026-100890

A null pointer dereference vulnerability exists in the Trusted Domain Project OpenDMARC (up to version 1.4.2 ). The flaw is located in the opendmarc_spf_ipv6_explode function within the SPF Parser component (specifically libopendmarc/opendmarc_spf.c). Manipulation of the cp argument triggers the ...

CVE-2026-100890

A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarcspfipv6explode in the library libopendmarc/opendmarcspf.c of the component SPF Parser. This manipulation of the argument cp causes null pointer dereference. It is possibl...

CVE-2026-100890 Trusted Domain Project OpenDMARC SPF Parser opendmarc_spf.c opendmarc_spf_ipv6_explode null pointer dereference

A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarcspfipv6explode in the library libopendmarc/opendmarcspf.c of the component SPF Parser. This manipulation of the argument cp causes null pointer dereference. It is possibl...

Important: gstreamer1-plugins-base

Issue Overview: A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an...

PT-2026-99737

Name of the Vulnerable Software and Affected Versions OpenDMARC versions prior to 1.4.3 Description A flaw in the SPF Parser component exists within the opendmarc spf ipv6 explode function located in the libopendmarc/opendmarc spf.c library. A remote attacker can trigger a null pointer dereferenc...

PT-2026-99742

Name of the Vulnerable Software and Affected Versions Trusted Domain Project OpenARC versions prior to 1.0.0.Beta0 Description A security flaw in the libopenarc component allows for a remote attack. The issue resides in the arc parse canon t function within the libopenarc/arc-canon.c library, whe...

The vulnerability of the PHP interpreter, related to the assignment of the null pointer, allows attackers to trigger a service failure.

The vulnerability of the PHP interpreter is related to pointer operations. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2026-100890: NULL Pointer Dereference

A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarcspfipv6explode in the library libopendmarc/opendmarcspf.c of the component SPF Parser. This manipulation of the argument cp causes null pointer dereference. It is possibl...

ROS-20260928-73-0038

The vulnerability of the parseapplysbmountoptions function in the Linux operating system is related to errors that occur when a string or array is terminated with the NULL character. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-102412

Name of the Vulnerable Software and Affected Versions Zephyr LwM2M client affected versions not specified Description The parse write op function in subsys/net/lib/lwm2m/lwm2m message handling.c contains a NULL pointer dereference when handling inbound CoAP WRITE/CREATE requests with a Block1...

CVE-2026-100895: NULL Pointer Dereference

A security flaw has been discovered in Trusted Domain Project OpenARC up to 1.0.0.Beta1. Impacted is the function arcparsecanont in the library libopenarc/arc-canon.c of the component libopenarc. The manipulation results in null pointer dereference. The attack may be launched remotely. The exploi...

CVE-2026-100627

Capgo Cap-go/capgo.app server backend Supabase functions contain an incorrect authorization flaw in the API-key bundle promotion path. The PUT /bundle endpoint, available to "all" and "write" API keys, dispatches to setChannel, which authorizes with checkPermissionc, 'channel.promotebundle', appI...

CVE-2026-100627

The Capgo (Cap-go/capgo.app) server backend Supabase functions contain an incorrect authorization flaw in the API-key bundle promotion path. Specifically, the PUT /bundle endpoint (accessible via "all" and "write" API keys) dispatches to setChannel, which fails to include the channel_id during th...

CVE-2026-100627 Capgo bundle promotion API channel RBAC deny override bypass

Capgo Cap-go/capgo.app server backend Supabase functions contain an incorrect authorization flaw in the API-key bundle promotion path. The PUT /bundle endpoint, available to "all" and "write" API keys, dispatches to setChannel, which authorizes with checkPermissionc, 'channel.promotebundle', appI...

EUVD-2026-87721

Capgo Cap-go/capgo.app server backend Supabase functions contain an incorrect authorization flaw in the API-key bundle promotion path. The PUT /bundle endpoint, available to "all" and "write" API keys, dispatches to setChannel, which authorizes with checkPermissionc, 'channel.promotebundle', appI...