107823 matches found
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: fbdev: The issue was fixed by correcting fbsetvar to prevent a null-ptr dereference in fbvideomodetovar. If fbaddvideomode in fbsetvar fails to allocate memory for fbvideomode, it may lead to a null-ptr dereference in...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: virtio-net: The issue of checking the received length in large packets has been fixed. Since commit 4959aebba8c0 “virtio-net: Use the MTU size as the buffer length for large packets”, when the guest gso is disabled, the allocated...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: media: af9005: Fix null-ptr-deref in af9005i2cxfer In af9005i2cxfer, msg is controlled by the user. When msgi.buf is null and msgi.len is zero, previous checks on msgi.buf will still be performed. Malicious data will eventually...
BIT-APACHE-2026-46729 Apache HTTP Server: mod_heartmonitor denial of service
NULL Pointer Dereference vulnerability in Apache HTTP Servers modheartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...
Security Bulletin: Due to AIX, IBM Cloud Pak System is affected by NULL pointer dereference vulnerability
Summary Due to AIX, IBM Cloud Pak System is affected by NULL pointer dereference vulnerability. Vulnerability was addressed in OS Image for AIX IBM Cloud Pak System version 2.3.5.1. Vulnerability Details CVEID:CVE-2025-49795 DESCRIPTION: A NULL pointer dereference vulnerability was found in libxm...
ROS-20261005-73-0103
The vulnerability of the teqlmasterxmit function in the net/sched/schteql.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20261005-73-0138
The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
ROS-20261005-73-0106
The vulnerability of the lecarpclearvccs function in the net/atm/lec.c module, which is part of the networking functions in the Linux kernel, relates to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20261005-73-0119
The vulnerability of the routeshortcircuit function in the drivers/net/vxlan/vxlancore.c file of the Linux kernel network device driver is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...
CVE-2026-66081
Access of Uninitialized Pointer vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...
CVE-2026-66859
NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...
CVE-2026-87117
NULL pointer dereference vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...
CVE-2026-93316: NULL Pointer Dereference
If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident...
PT-2026-106149
Name of the Vulnerable Software and Affected Versions Microsoft Bluetooth affected versions not specified Description An uninitialized pointer dereference in the handle le monitor device event function within msft.cc allows for a control-flow hijack in the privileged bluetooth process. This issue...
CVE-2026-49933: Access of Uninitialized Pointer
In handlelemonitordeviceevent of msft.cc, there is a possible control-flow hijack in the privileged bluetooth process due to an uninitialized pointer dereference. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2026-19185: Untrusted Pointer Dereference
The system-call verifier for i3cdoccc in drivers/i3c/i3chandlers.c validated the outer struct i3ccccpayload, the broadcast ccc.data buffer and the targets.payloads array, but did not validate the per-target data buffers those array elements point at. Each struct i3cccctargetpayload carries its ow...
AlmaLinux 9.2 [TuxCare] Security Update: mutt Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1791192215)
The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791192215 advisory. - mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP authcram MD5 digest. CVE-2026-43859 - mutt before 2.3.2...
ROS-20261005-73-0105
The vulnerability of the meshrxcaFrame function in the net/mac80211/mesh.c module of the mac80211 stack in the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...
CVE-2019-19203
CVE-2019-19203 Oniguruma 6.x 6.9.4rc2 より前 で問題が発見されました。ファイル gb18030.c の関数 gb18030mbcenclen において、UChar ポインタが、マッチした文字列の末尾を超えていないかチェックせずに参照解除されます。これにより、ヒープベースのバッファオーバーリードが発生します。 研究者: ManhND The Tarantula Team、VinCSS Vingroup のメンバー Oniguruma とは K. Kosako による Oniguruma は、BSD...