CVE-2026-46729

NULL Pointer Dereference vulnerability in Apache HTTP Servers modheartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-17053 SMBus callback-removal syscalls accept an unvalidated user pointer, letting user threads manipulate kernel callback state

The SMBus driver API exposed smbussmbalertremovecb and smbushostnotifyremovecb as Zephyr syscalls. Their verifiers in drivers/smbus/smbushandlers.c validated only the dev argument with KSYSCALLOBJdev, KOBJDRIVERSMBUS and forwarded the caller-supplied struct smbuscallback cb pointer into kernel-mo...

CVE-2026-17053

The Zephyr RTOS SMBus driver API contains a vulnerability where smbus_smbalert_remove_cb() and smbus_host_notify_remove_cb() are exposed as syscalls. These syscalls fail to perform K_SYSCALL_MEMORY_READ/WRITE validation on the caller-supplied struct smbus_callback *cb pointer, forwarding it direc...

BIT-PGBOUNCER-2026-19888 NULL pointer dereference in SCRAM client-final-message parsing in PgBouncer

Missing validation of a mandatory attribute in the SCRAM client-final-message parser in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to crash the process. A malformed message can make the parser report success while leaving a required value unset, which is then dereferenced ...

Resource Allocation

com.github.java-json-tools, jackson-coreutils is vulnerable to resource allocation. The vulnerability is due to improper resource allocation in the TreePointer.tokensFromInput function of the JSON Pointer parser, which allows a remote attacker to exploit the parser and cause excessive resource...

CLEANSTART-2024-PI09987 Inappropriate implementation in Pointer Lock in Google Chrome on Windows prior to 98

Security vulnerability affects the chromium package. Inappropriate implementation in Pointer Lock in Google Chrome on Windows prior to 98...

CLEANSTART-2023-FZ67908 NULL pointer dereference was discovered in sbr_process_channel of libfaad/sbr_dec

Security vulnerability affects the faad2 package. A NULL pointer dereference was discovered in sbrprocesschannel of libfaad/sbrdec...

CLEANSTART-2023-OJ89362 NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank

Security vulnerability affects the faad2 package. A NULL pointer dereference was discovered in ifilterbank of libfaad/filtbank...

CLEANSTART-2023-HR33232 NULL pointer dereference was discovered in ic_predict of libfaad/ic_predict

Security vulnerability affects the faad2 package. A NULL pointer dereference was discovered in icpredict of libfaad/icpredict...

CLEANSTART-2023-TC91204 NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank

Security vulnerability affects the faad2 package. A NULL pointer dereference was discovered in ifilterbank of libfaad/filtbank...

CLEANSTART-2023-DO62878 NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank

Security vulnerability affects the faad2 package. A NULL pointer dereference was discovered in ifilterbank of libfaad/filtbank...

thrift: thrift: Denial of Service via uninitialized pointer access in c_glib bindings

A flaw was found in Apache Thrift's C GLib bindings. A remote, unauthenticated attacker could exploit this vulnerability by sending specially crafted input that triggers the access of an uninitialized pointer. This access can cause the application to crash, resulting in a Denial of Service DoS...

CLEANSTART-2024-NJ43669 null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request)

Security vulnerability affects the heimdal package. A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ Ticket Granting Server - Request...

SUSE CVE-2026-98031

In the Linux kernel, the following vulnerability has been resolved: nexthop: Initialize extack in removenhgrpentry removenhgrpentry prints the extack message when a listener fails to replace the reduced nexthop group. However, extack is not initialized and listeners are not required to set a...

ROS-20261001-73-0011

The vulnerability in gstreamer1-plugins-base is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-103964

Tapo C120 v1 and C200 v5 contain a NULL pointer dereference in the HTTPS onboarding connect request parser. The interface is reachable without authentication after initial setup and does not validate that a password field is present for certain authentication and encryption parameter combinations...

CVE-2026-82357: NULL Pointer Dereference

RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device. An object defined by the user application may not have all required subindexes for object 0x1018. An unauthenticated, remote attacker with access to the CAN bus, through a compromise...

CVE-2026-9032: NULL Pointer Dereference

Tapo C120 v1 and C200 v5 contain a NULL pointer dereference in the HTTPS onboarding connect request parser. The interface is reachable without authentication after initial setup and does not validate that a password field is present for certain authentication and encryption parameter combinations...

CVE-2026-46729: NULL Pointer Dereference

NULL Pointer Dereference vulnerability in Apache HTTP Servers modheartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-63686: NULL Pointer Dereference

A NULL pointer dereference in modxml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of service via a proxied response with a charset whose conversion partially succeeds then fails. Users are recommended to...