CVE-2026-88339

A NULL pointer dereference vulnerability exists in the gfsgvrmlfieldclone function of GPAC 2d7da22e 26.08-DEV. The vulnerability occurs when cloning a PROTO default SFImage field with a NULL source pointer. An attacker can provide a specially crafted input file that triggers the condition,...

ROS-20260922-73-0108

The vulnerability in the 389-ds-base is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-96960

Name of the Vulnerable Software and Affected Versions InDesign Desktop affected versions not specified Description InDesign Desktop contains a NULL Pointer Dereference issue, which occurs when the software attempts to read a memory location that is null, causing the program to crash. This can lea...

Unity Linux 20.1060e / 20.1070e Security Update: wpa_supplicant (UTSA-2021-001735)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2021-001735 advisory. The EAP-pwd implementation in hostapd EAP server before 2.8 and wpasupplicant EAP peer before 2.8 does not validate fragmentation reassembly state properly for a cas...

AlmaLinux 9 : gstreamer1-plugins-base (ALSA-2026:69100)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:69100 advisory. gstreamer: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow CVE-2026-18297 gstreamer1-plugins-base: gstreamer: NULL/invalid-point...

RockyLinux 9 : gstreamer1-plugins-base (RLSA-2026:69100)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69100 advisory. gstreamer: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow CVE-2026-18297 gstreamer1-plugins-base: gstreamer:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-090058)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090058 advisory. In Apache HTTP Server 2.4.32-2.4.39, when modremoteip was configured to use a trusted intermediary proxy server using the PROXY protocol, a specially crafted PROXY...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000572)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000572 advisory. NULL Pointer Dereference in function vimregexecstring at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libxml2 (UTSA-2023-001598)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001598 advisory. In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occurs in...

PT-2026-105968

stack graphs::c is a public module. From 0.0.3 through the current crates.io release 0.14.1, its pointer-taking entry points are pub extern "C" fn rather than unsafe fn. Safe Rust can call them. sg stack graph free frees the pointer with Box::from raw. sg stack graph freestd::ptr::null mut is...

CVE-2026-88340: Release of Invalid Pointer or Reference

An invalid pointer release vulnerability exists in YARA 4.5.8 during deserialization of compiled .yrc rule files. The vulnerability is caused by insufficient validation of external-variable pointers, which may lead to invalid free in yrrulesdestroy or wild pointer access in yrobjectcreate. An...

CVE-2026-88339

A NULL pointer dereference vulnerability exists in the gfsgvrmlfieldclone function of GPAC 2d7da22e 26.08-DEV. The vulnerability occurs when cloning a PROTO default SFImage field with a NULL source pointer. An attacker can provide a specially crafted input file that triggers the condition,...

ROS-20260922-73-0098

The vulnerability of the xdpmasterredirect function in the net/core/filter.c module, which supports networking functions in Linux kernels, is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

PT-2026-114448

Уязвимость средства автоматизации компьютерной вёрстки Adobe InDesign связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

ROS-20260922-73-0069

The vulnerability of the amdgpugarttableramfree function in the drivers/gpu/drm/amd/amdgpu/amdgpugart.c driver of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a...

ROS-20260922-73-0038

The vulnerability of the batadvblasendclaim function in the net/batman-adv/bridgeloopavoidance.c module, which is part of the network functions of the Linux operating system’s kernel, relates to the use of pointers. Exploiting this vulnerability could allow a malicious actor to cause service...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gnutls (UTSA-2022-001364)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-001364 advisory. A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: xorg-x11-server (UTSA-2023-000014)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000014 advisory. A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory, resulting in out-of-bounds...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000531)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000531 advisory. NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240. Tenable has extracted the preceding description block directly from the Unity Linux security...

CVE-2026-88340

An invalid pointer release vulnerability exists in YARA 4.5.8 during deserialization of compiled .yrc rule files. The vulnerability is caused by insufficient validation of external-variable pointers, which may lead to invalid free in yrrulesdestroy or wild pointer access in yrobjectcreate. An...