105164 matches found
mtk_vpu Heap Buffer Overflow DoS
The vulnerability of the vpuloadfirmware function in the drivers/media/platform/mediatek/vpu/mtkvpu.c file of the MediaTek VPU video processor driver for Linux operating systems is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a system...
Amphion VPU video encoder driver Buffer Overflow DoS
The vulnerability of the functions vencgparm and vencsparm in the driver/media/platform/amphion/venc.c file of the Amphion VPU video encoder driver for Linux operating systems is related to the use of a null pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...
lpc32xx PWM Driver Heap Buffer Overflow DoS
The vulnerability of the lpc32xxpwmprobe function in the drivers/pwm/pwm-lpc32xx.c file of the PWM device driver for Linux operating systems is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...
container management system createDependentVolumesFromBackup function Heap Buffer Overflow DoS
The vulnerability of the createDependentVolumesFromBackup function in the internal/server/storage/backend.go file of the container management system and the virtual machine manager Incus is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to trigg...
SUSE SLES12 Security Update : libusb-1_0 (SUSE-SU-2026:4080-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4080-1 advisory. This update for libusb-10 fixes the following issue: - CVE-2026-23679: NULL pointer dereference in parseinterface allows attackers to crash...
Linux Distros Unpatched Vulnerability : CVE-2026-93588
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a NULL pointer dereference in the PNM coder. When the coder reaches a memory resource limit at a...
SUSE SLED15 / SLES15 Security Update : libusb-1_0 (SUSE-SU-2026:4050-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4050-1 advisory. This update for libusb-10 fixes the following issue: - CVE-2026-23679: NULL pointer dereference in parseinterface allow...
SUSE SLES15 Security Update : terraform-provider-null (SUSE-SU-2026:4062-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4062-1 advisory. - CVE-2026-84303: github.com/grpc/grpc-go: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies vi...
Important: gstreamer1-plugins-base security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins. Security Fixes: gstreamer: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow...
OESA-2026-3987 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: Fix null ptr deref in hciabortconn hciabortconn read hciskbeventhdev-sentcmd when a connection was pending, but hdev-sentcmd can be NULL whil...
OESA-2026-3968 gstreamer1-plugins-base security update
GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin. Security Fixes: GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to...
OESA-2026-3969 gstreamer1-plugins-base security update
GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin. Security Fixes: A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization...
OESA-2026-3967 gstreamer1-plugins-base security update
GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin. Security Fixes: GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to...
OESA-2026-3966 gstreamer1-plugins-base security update
GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin. Security Fixes: GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to...
RUSTSEC-2026-0309 `SinglyLinkedList::remove` dereferences a null link
In versions before 0.2.1, SinglyLinkedList::remove is safe and walks the intrusive list with an unchecked dereference. On an empty list, or when node is not in the list, currentelm.next reads a null pointer. That is undefined behavior. The list head is a raw mut Node, and safe code can construct...
`SinglyLinkedList::remove` dereferences a null link
In versions before 0.2.1, SinglyLinkedList::remove is safe and walks the intrusive list with an unchecked dereference. On an empty list, or when node is not in the list, currentelm.next reads a null pointer. That is undefined behavior. The list head is a raw mut Node, and safe code can construct...
MGASA-2026-0423 Updated patch package fixes security vulnerabilities
NULL Pointer Dereference in GNU patch. CVE-2026-56288 Loop with Unreachable Exit Condition in GNU patch. CVE-2026-56289...
Updated patch package fixes security vulnerabilities
NULL Pointer Dereference in GNU patch. CVE-2026-56288 Loop with Unreachable Exit Condition in GNU patch. CVE-2026-56289...
CLSA-2026-1789783613 Fix CVE(s): CVE-2026-32853, CVE-2026-32854
SECURITY UPDATE: Heap out-of-bounds read in UltraZip subrect parsing - debian/patches/CVE-2026-32853.patch: bound the subrect cursor to the decompressed data in HandleUltraZipBPP libvncclient/ultra.c - CVE-2026-32853 SECURITY UPDATE: NULL pointer dereference in httpd proxy handlers -...
SUSE CVE-2026-76781
A flaw was found in libxml2. A local user or an attacker providing a specially crafted XML catalog can trigger a NULL pointer dereference during XML catalog parsing. This occurs when a nextCatalog element lacks its mandatory catalog attribute, leading to the application crashing and causing a...