Browse CVEs

MEDIUM 6.3 CVE-2025-70102 A NULL pointer dereference occurs in Roy Marples NetworkConfiguration/dhcpcd 10.3.0 while parsing configuration options. In parse_option() (src/if-op… Mitigation only Fix from $1,6002026-06-15 MEDIUM 5.5 CVE-2025-55643 A NULL pointer dereference in the TrackWriter handling component (filters/mux_isom.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Servi… Gpac 26.02.0+ Fix from $1,6002026-06-15 MEDIUM 5.5 CVE-2025-55649 A NULL pointer dereference in the gf_media_map_esd function (media_tools/isom_tools.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Serv… Gpac 26.02.0+ Fix from $1,6002026-06-15 MEDIUM 5.5 CVE-2025-55641 A NULL pointer dereference in the gf_isom_copy_sample_info function (isomedia/isom_write.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of… Gpac 26.02.0+ Fix from $1,6002026-06-15 MEDIUM 5.5 CVE-2025-7018 Null pointer dereference vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Denial-of-Service of the antivir… Mitigation only Fix from $1,6002026-06-12 MEDIUM 6.5 CVE-2026-22899 A NULL pointer dereference vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can then exploit… File Station 5.5.6.5208+ Fix from $1,6002026-06-10 HIGH 7.2 CVE-2026-24716 A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administra… Qts 5.2.9.3492+ Fix from $1,9502026-06-10 HIGH 7.2 CVE-2025-66281 A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit th… Qts 5.2.9.3410+ Fix from $1,9502026-06-10 HIGH 7.2 CVE-2025-62850 A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administra… Quts Hero Mitigation only Fix from $1,9502026-06-10 HIGH 7.5 CVE-2026-45541 ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.6, 5.3.5, 5.4.4, 5.5.4, and 6.0, a NULL-pointer dereference … Esp Idf Patch available Fix from $1,9502026-06-10 MEDIUM 6.5 CVE-2026-9752 An authorized user could trigger a server crash by running a query with a 2dsphere index on a field that stores a GeoJSON GeometryCollection containi… MongoDB 7.0.35 / 8.0.24+ Fix from $1,6002026-06-09 MEDIUM 6.5 CVE-2026-9743 In MongoDB Server 8.0, an aggregation stage can leave its _subPipeline field null during processing of certain pipelines. If a getMore is subsequentl… MongoDB 8.0.24+ Fix from $1,6002026-06-09 MEDIUM 5.5 CVE-2025-55651 A NULL pointer dereference in the gf_isom_get_user_data_count function (isomedia/isom_read.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial … Gpac No fix yet Fix from $1,6002026-06-09 HIGH 7.5 CVE-2025-55657 A NULL pointer dereference in the gf_odf_vvc_cfg_write_bs function (odf/descriptors.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Serv… Gpac No fix yet Fix from $1,9502026-06-09 MEDIUM 6.5 CVE-2025-55659 A NULL pointer dereference in the ctts_box_write function (isomedia/box_code_base.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Servic… Gpac No fix yet Fix from $1,6002026-06-09 MEDIUM 5.5 CVE-2026-34703 InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denia… Indesign 20.5.4 / 21.4+ Fix from $1,6002026-06-09 MEDIUM 5.5 CVE-2026-34704 InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denia… Indesign 20.5.4 / 21.4+ Fix from $1,6002026-06-09 MEDIUM 6.5 CVE-2026-42903 Null pointer dereference in Windows Kerberos allows an authorized attacker to deny service over a network. Windows 10 1607 10.0.14393.9234 / 10.0.17763.8880+ Fix from $1,6002026-06-09 MEDIUM 5.9 CVE-2026-42767 Issue summary: An attacker-controlled CMP (Certificate Management Protocol) server could trigger a NULL pointer dereference in a CMP client applicati… OpenSSL 3.0.21 / 3.4.6+ Fix from $1,6002026-06-09 HIGH 7.5 CVE-2026-42764 Issue summary: Receiving a QUIC initial packet with an invalid token may trigger a NULL pointer dereference in the OpenSSL QUIC server with address v… OpenSSL 3.5.7 / 3.6.3+ Fix from $1,9502026-06-09 HIGH 7.5 CVE-2026-42765 Issue summary: When a partial-chain certificate verification is enabled together with OCSP response checking for the whole chain, a NULL dereference … OpenSSL 3.6.3+ Fix from $1,9502026-06-09 MEDIUM 5.9 CVE-2026-42766 Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This… OpenSSL 1.0.2zq / 1.1.1zh+ Fix from $1,6002026-06-09 HIGH 7.5 CVE-2026-11788 A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing… Directory Server Mitigation only Fix from $1,9502026-06-09 MEDIUM 5.5 CVE-2026-46313 In the Linux kernel, the following vulnerability has been resolved: media: intel/ipu6: fix error pointer dereference In a error path isp->psys is c… Linux Kernel 6.12.90 / 6.18.32+ Fix from $1,6002026-06-08 MEDIUM 5.5 CVE-2026-46305 In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: os_dep: avoid NULL pointer dereference in rtw_cbuf_alloc Th… Linux Kernel 7.0.7+ Fix from $1,6002026-06-08 MEDIUM 5.5 CVE-2026-46310 In the Linux kernel, the following vulnerability has been resolved: media: renesas: vsp1: Fix NULL pointer deref on module unload When unloading th… Linux Kernel 6.18.32 / 7.0.9+ Fix from $1,6002026-06-08 MEDIUM 5.5 CVE-2026-46296 In the Linux kernel, the following vulnerability has been resolved: spi: s3c64xx: fix NULL-deref on driver unbind A change moving DMA channel alloc… Linux Kernel 6.1.176 / 6.6.140+ Fix from $1,6002026-06-08 MEDIUM 5.5 CVE-2026-46284 In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix early boot crash on parameters without '=' separator If hugepag… Linux Kernel 6.18.27 / 7.0.4+ Fix from $1,6002026-06-08 MEDIUM 5.5 CVE-2026-46278 In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix segfault when updating ftrace mask Fix invalid data access… Linux Kernel 7.0.4+ Fix from $1,6002026-06-08 MEDIUM 5.5 CVE-2026-46282 In the Linux kernel, the following vulnerability has been resolved: iio: frequency: admv1013: fix NULL pointer dereference on str When device_prope… Linux Kernel 6.12.86 / 6.18.27+ Fix from $1,6002026-06-08