112931 matches found
SUSE CVE-2026-107888
OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs when a job marked job-held-on-create refers to a temporary printer that has been automatically deleted. Temporary-printer cleanup can remove the destination without canceling its held jobs, and the scheduler...
SUSE CVE-2026-107890
OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests. IPP parsing creates unnamed separator attributes with IPPTAGZERO, but addjob converts these separators to IPPTAGJOB. During job startup, getoptions/ipplength subsequentl...
CVE-2026-104114
A NULL pointer dereference in the illumos Network Auto-Magic daemon nwamd allows a local user to crash the daemon. nwamddoorswitch in usr/src/cmd/cmd-inet/lib/nwamd/doorif.c writes to the caller's request structure before checking that a request was supplied, and before checking the caller's...
CVE-2026-104114 NULL pointer dereference in illumos nwamd door handler allows local users to crash the daemon
A NULL pointer dereference in the illumos Network Auto-Magic daemon nwamd allows a local user to crash the daemon. nwamddoorswitch in usr/src/cmd/cmd-inet/lib/nwamd/doorif.c writes to the caller's request structure before checking that a request was supplied, and before checking the caller's...
CVE-2026-104114 NULL pointer dereference in illumos nwamd door handler allows local users to crash the daemon
A NULL pointer dereference in the illumos Network Auto-Magic daemon nwamd allows a local user to crash the daemon. nwamddoorswitch in usr/src/cmd/cmd-inet/lib/nwamd/doorif.c writes to the caller's request structure before checking that a request was supplied, and before checking the caller's...
CVE-2026-104114
A NULL pointer dereference in the illumos Network Auto-Magic daemon (nwamd) allows local users to crash the daemon. The vulnerability exists in the nwamd_door_switch() function within usr/src/cmd/cmd-inet/lib/nwamd/door_if.c, where the system writes to the caller's request structure without first...
EUVD-2026-95802
A NULL pointer dereference in the illumos Network Auto-Magic daemon nwamd allows a local user to crash the daemon. nwamddoorswitch in usr/src/cmd/cmd-inet/lib/nwamd/doorif.c writes to the caller's request structure before checking that a request was supplied, and before checking the caller's...
CVE-2026-104114 NULL pointer dereference in illumos nwamd door handler allows local users to crash the daemon
A NULL pointer dereference in the illumos Network Auto-Magic daemon nwamd allows a local user to crash the daemon. nwamddoorswitch in usr/src/cmd/cmd-inet/lib/nwamd/doorif.c writes to the caller's request structure before checking that a request was supplied, and before checking the caller's...
CVE-2026-104114
A NULL pointer dereference in the illumos Network Auto-Magic daemon nwamd allows a local user to crash the daemon. nwamddoorswitch in usr/src/cmd/cmd-inet/lib/nwamd/doorif.c writes to the caller's request structure before checking that a request was supplied, and before checking the caller's...
CLSA-2026-1791552547 Fix CVE(s): CVE-2026-46729
SECURITY UPDATE: NULL pointer dereference in modheartmonitor - debian/patches/CVE-2026-46729.patch: reject heartbeat POSTs that lack the busy or ready parameter or exceed the maximum message length, and parse port, busy and ready with strtol validation in hmhandler in...
CVE-2026-108063 Libhangul: null pointer dereference in hanja_new() when looking up a malformed hanja dictionary entry
A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its key. By providing a specially crafted dictionary file to an application that queries it, an attacker can trigger an unexpected application crash,...
CVE-2026-108063 Libhangul: null pointer dereference in hanja_new() when looking up a malformed hanja dictionary entry
A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its key. By providing a specially crafted dictionary file to an application that queries it, an attacker can trigger an unexpected application crash,...
CVE-2026-108063
A null pointer dereference vulnerability exists in libhangul within the hanja_new() function. The flaw occurs because the library fails to verify that a Hanja dictionary entry contains a valid value alongside its key when parsing files. An attacker can provide a specially crafted dictionary file ...
CLSA-2026-1791552379 Fix CVE(s): CVE-2026-46729
SECURITY UPDATE: NULL pointer dereference in modheartmonitor - debian/patches/CVE-2026-46729.patch: reject a heartbeat POST body that lacks the busy or ready parameter with HTTP 400 instead of passing a NULL pointer to atoi in hmhandler in modules/cluster/modheartmonitor.c. - CVE-2026-46729...
CLSA-2026-1791552138 httpd: Fix of CVE-2026-63686
CVE-2026-63686: fix modxml2enc NULL pointer dereference in xml2encffunc on a failed or incomplete charset conversion...
CLSA-2026-1791552137 httpd: Fix of CVE-2026-63686
CVE-2026-63686: fix modxml2enc NULL pointer dereference in xml2encffunc on a failed or incomplete charset conversion...
CVE-2026-96393
The Affinity by Canva app before 3.3.1 October 2026 release did not perform adequate bounds checking when parsing Affinity document files, leading to an out-of-bounds pointer dereference. A threat actor could craft an Affinity document that, when opened by a user in Affinity, could result in an...
EUVD-2026-95748
The Affinity by Canva app before 3.3.1 October 2026 release did not perform adequate bounds checking when parsing Affinity document files, leading to an out-of-bounds pointer dereference. A threat actor could craft an Affinity document that, when opened by a user in Affinity, could result in an...
CVE-2026-96393
The Affinity by Canva app before 3.3.1 October 2026 release did not perform adequate bounds checking when parsing Affinity document files, leading to an out-of-bounds pointer dereference. A threat actor could craft an Affinity document that, when opened by a user in Affinity, could result in an...
CVE-2026-96393
The Affinity by Canva app before 3.3.1 October 2026 release did not perform adequate bounds checking when parsing Affinity document files, leading to an out-of-bounds pointer dereference. A threat actor could craft an Affinity document that, when opened by a user in Affinity, could result in an...