CVE-2026-30656

A NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing job files that include the fdp_pli option. The vulnerability occurs because the callback function str_fdp_cli_cb() fails to validate the input pointer, leading to a call of strdup() on a NULL value whe...

UBUNTU-CVE-2017-14064

Ruby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory during a JSON.generate call. The issues lies in using strdup in ext/json/ext/generator/generator.c, which will stop after encountering a '\0' byte, returning a pointer to a string of length zero, which is...