#cwe-476

共收录 587 条相关情报。

← 返回所有主题
漏洞预警2026-07-08 发布INFO

A NULL pointer dereference in the SQLite Session Extension in SQLite 3.53.1 and SQLite trunk builds before check-in e807d4e3798efd53 allows an attacker who can supply a malforme...

CVE-2026-50812

A NULL pointer dereference in the SQLite Session Extension in SQLite 3.53.1 and SQLite trunk builds before check-in e807

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

Wazuh wazuh-modulesd before 5.0.0-beta3 contains a null pointer dereference vulnerability in inventory_sync FlatBuffer DataValue handling. An enrolled agent can send a verifier-...

CVE-2026-56401

Wazuh wazuh-modulesd before 5.0.0-beta3 contains a null pointer dereference vulnerability in inventory_sync FlatBuffer D

历史摘要 · 未重新核验 · NVD

安全公告2026-07-08 发布INFO

Wazuh - NULL Pointer Dereference in inventory_sync DataValue FlatBuffer Handling

CVE-2026-56401

Wazuh wazuh-modulesd before 5.0.0-beta3 contains a null pointer dereference vulnerability in inventory_sync FlatBuffer D

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-07 发布INFO

The Dhara flash translation layer disk driver (drivers/disk/ftl_dhara.c) implemented the dhara_nand_ callbacks so that, on a flash error, the error code was written unconditiona...

CVE-2026-10659

The Dhara flash translation layer disk driver (drivers/disk/ftl_dhara.c) implemented the dhara_nand_ callbacks so that,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-06 发布INFO

mrubyc through 3.4.1 was found to contain a NULL pointer dereference in src/vm.c in op_super() / OP_SUPER due to a missing runtime guard for top-level super.

CVE-2026-38976

mrubyc through 3.4.1 was found to contain a NULL pointer dereference in src/vm.c in op_super() / OP_SUPER due to a missi

历史摘要 · 未重新核验 · NVD

安全公告2026-07-06 发布INFO

DNG SDK versions 1.7.1 2536 and earlier are affected by a NULL Pointer Dereference vulnerability...

CVE-2026-48267

DNG SDK versions 1.7.1 2536 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-06 发布INFO

DNG SDK versions 1.7.1 2536 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit...

CVE-2026-48267

DNG SDK versions 1.7.1 2536 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-06 发布INFO

A flaw has been found in GPAC 26.02.0. This affects the function nhmldump_send_frame of the file src/filters/write_nhml.c of the component Media File Handler. Executing a manipu...

CVE-2026-14790

A flaw has been found in GPAC 26.02.0. This affects the function nhmldump_send_frame of the file src/filters/write_nhml.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-05 发布INFO

The MAX32xxx USB device controller driver (drivers/usb/udc/udc_max32.c, compatible adi_max32_usbhs) dereferenced an endpoint buffer in its OUT and IN transfer-completion handler...

CVE-2026-10656

The MAX32xxx USB device controller driver (drivers/usb/udc/udc_max32.c, compatible adi_max32_usbhs) dereferenced an endp

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-01 发布MEDIUM

RAOP module accepts unbounded Content-Length values and does not check the pw_array_add() return.

CVE-2026-14324

RAOP module accepts unbounded Content-Length values and does not check the pw_array_add() return.

来源摘录 · NVD

漏洞预警2026-07-01 发布INFO

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlle...

CVE-2026-20457

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service

历史摘要 · 未重新核验 · NVD

安全公告2026-06-30 发布INFO

Open Babel has a NULL pointer dereference in CDXML OBAtom::GetExplicitValence

CVE-2026-3408

### Summary A memory-safety vulnerability in Open Babel's CDXML file format parser caused a NULL pointer dereference wh

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-30 发布INFO

Open Babel has NULL pointer dereference in MOL2 OBAtom::SetFormalCharge

CVE-2026-2705

### Summary A memory-safety vulnerability in Open Babel's MOL2 file format parser caused a NULL pointer dereference whe

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-30 发布INFO

Woodpecker before 3.15.0 registers the /api/orgs/lookup/*org_full_name endpoint without authentication middleware, and the LookupOrg handler unconditionally dereferences the ses...

CVE-2026-58369

Woodpecker before 3.15.0 registers the /api/orgs/lookup/*org_full_name endpoint without authentication middleware, and t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

mcumgr_serial_process_frag() in subsys/mgmt/mcumgr/transport/src/serial_util.c calls net_buf_reset() on the result of smp_packet_alloc() before checking it for NULL. smp_packet_...

CVE-2026-10648

mcumgr_serial_process_frag() in subsys/mgmt/mcumgr/transport/src/serial_util.c calls net_buf_reset() on the result of sm

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-29 发布INFO

JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful token of the input is a slash. The regexp versus division...

CVE-2026-56017

JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-26 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths In dc_dmub_srv_log_diagnostic_data() and...

CVE-2026-53313

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid NULL dereference in dc_dmub_

来源摘录 · NVD

漏洞预警2026-06-26 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: net: mana: Guard mana_remove against double invocation If PM resume fails (e.g., mana_attach() returns an e...

CVE-2026-53297

In the Linux kernel, the following vulnerability has been resolved: net: mana: Guard mana_remove against double invocat

来源摘录 · NVD

漏洞预警2026-06-26 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: btrfs: only release the dirty pages io tree after successful writes [WARNING] With extra warning on dirty e...

CVE-2026-53284

In the Linux kernel, the following vulnerability has been resolved: btrfs: only release the dirty pages io tree after s

来源摘录 · NVD

漏洞预警2026-06-26 发布INFO

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.37.0 until 1.37.5 and 1.38.3, when the %REQUESTED_SERVER_NAME(X:Y)% is used in log ...

CVE-2026-47220

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.37.0 until 1.37.5 and 1.38

历史摘要 · 未重新核验 · NVD