#cwe-476

共收录 587 条相关情报。

漏洞预警2026-08-09 发布INFO

Crypt::OpenSSL::PKCS12 versions before 1.98 for Perl allow a NULL pointer dereference in print_attribute via a zero length BMPSTRING attribute. print_attribute() sizes the dest...

CVE-2026-17510

Crypt::OpenSSL::PKCS12 versions before 1.98 for Perl allow a NULL pointer dereference in print_attribute via a zero leng

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

漏洞预警2026-08-07 发布HIGH

Klever-Go is the Go implementation of the Klever blockchain protocol. Versions 1.7.14 through 1.7.17 are vulnerable to a nil-pointer panic triggered by a protobuf Transaction wh...

CVE-2026-52878

CVE-2026-52878 是 Klever-Go（Klever 区块链协议的 Go 实现）中的一个拒绝服务漏洞，影响版本 1.7.14 至 1.7.17。漏洞根源在于 protobuf 解码过程中，如果 Transaction 消息的

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

安全公告2026-08-07 发布INFO

Consul Community Edition and Consul Enterprise 1.18.0 through 2.0.2 are vulnerable to an...

CVE-2026-19012

Consul Community Edition and Consul Enterprise 1.18.0 through 2.0.2 are vulnerable to an authenticated denial of service

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-476 #severity:medium

漏洞预警2026-08-07 发布INFO

Consul Community Edition and Consul Enterprise 1.18.0 through 2.0.2 are vulnerable to an authenticated denial of service in the Enterprise-to-Community Edition downgrade path th...

CVE-2026-19012

Consul Community Edition and Consul Enterprise 1.18.0 through 2.0.2 are vulnerable to an authenticated denial of service

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

漏洞预警2026-08-07 发布INFO

NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address. Versions prior to 2.0.0 have a command execution vulnerabilit...

CVE-2026-48097

NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address. Vers

历史摘要 · 未重新核验 · NVD

#cve #cwe-78 #cwe-476

安全公告2026-08-07 发布INFO

Software installed and run as a non-privileged user may conduct improper GPU system calls to...

CVE-2026-45204

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger OOB access and kern

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-476

漏洞预警2026-08-07 发布INFO

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger OOB access and kernel null pointer dereference in an error path. Null poi...

CVE-2026-45204

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger OOB access and kern

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

安全公告2026-08-07 发布INFO

llama.cpp builds b1886 through b7445 contain a null pointer dereference vulnerability in the...

CVE-2026-70639

llama.cpp builds b1886 through b7445 contain a null pointer dereference vulnerability in the LLaMA-Android JNI wrapper w

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-476 #severity:medium

漏洞预警2026-08-06 发布HIGH

llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrapper where bench_1model() and free_1context() lack synchro...

CVE-2026-70640

llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrap

来源摘录 · NVD

#cve #cwe-362 #cwe-476

漏洞预警2026-08-06 发布MEDIUM

llama.cpp builds b1886 through b7445 contain a null pointer dereference vulnerability in the LLaMA-Android JNI wrapper where the bench_1model() function fails to validate the mo...

CVE-2026-70639

llama.cpp builds b1886 through b7445 contain a null pointer dereference vulnerability in the LLaMA-Android JNI wrapper w

来源摘录 · NVD

#cve #cwe-476

安全公告2026-08-06 发布INFO

llama.cpp b1886–b7445 Race Condition Use-After-Free via llama-android.cpp

CVE-2026-70640

llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrap

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-362 #cwe-476

安全公告2026-08-06 发布INFO

llama.cpp b1886–b7445 Null Pointer Dereference DoS via llama-android.cpp

CVE-2026-70639

llama.cpp builds b1886 through b7445 contain a null pointer dereference vulnerability in the LLaMA-Android JNI wrapper w

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-476

漏洞预警2026-08-06 发布INFO

In open62541 v1.5.5, the server-side AddReferences implementation contains an incomplete validation flaw for non-local ExpandedNodeId targets. A remote attacker can send a craft...

CVE-2026-67870

In open62541 v1.5.5, the server-side AddReferences implementation contains an incomplete validation flaw for non-local E

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

漏洞预警2026-08-05 发布INFO

H5Z__filter_nbit in H5Znbit.c in HDF5 through 2.3.0 dereferences cd_values[0] through cd_values[4] without validating that cd_values is non-NULL or that cd_nelmts is at least 5,...

CVE-2026-19026

H5Z__filter_nbit in H5Znbit.c in HDF5 through 2.3.0 dereferences cd_values[0] through cd_values[4] without validating th

历史摘要 · 未重新核验 · NVD

#cve #cwe-476 #cwe-1284

漏洞预警2026-08-05 发布INFO

NULL pointer dereference in H5Pget_fill_value in HDF5 before 2.3.0 allows attackers to cause a denial of service via a dataset whose version 1 or 2 fill value message has the "d...

CVE-2026-19024

NULL pointer dereference in H5Pget_fill_value in HDF5 before 2.3.0 allows attackers to cause a denial of service via a d

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

安全公告2026-08-01 发布INFO

FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device...

CVE-2026-67304

FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-476 #severity:high

安全公告2026-08-01 发布INFO

FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache...

CVE-2026-67288

FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache request decoders that accept

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-476 #severity:high

漏洞预警2026-08-01 发布INFO

FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when reader-state decoding fails. Attackers can send malforme...

CVE-2026-67304

FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

漏洞预警2026-08-01 发布INFO

FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache request decoders that accept NULL NDR pointers for LookupName in SCARD_IOCTL_READCACHE...

CVE-2026-67288

FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache request decoders that accept

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

安全公告2026-08-01 发布INFO

FreeRDP before 3.29.0 Denial of Service via smartcard cache

CVE-2026-67288

FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache request decoders that accept

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-476