#cwe-476

共收录 587 条相关情报。

← 返回所有主题
漏洞预警2026-10-27 发布INFO

A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows a remote, unauthenticated attacker with network access to the management interfa...

CVE-2026-111107

A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows a remote, unauthenticat

历史摘要 · 未重新核验 · NVD

安全公告2026-10-27 发布INFO

libcss through 0.9.2 contains a NULL pointer dereference vulnerability in mq_parse_media_query()...

CVE-2026-116740

libcss through 0.9.2 contains a NULL pointer dereference vulnerability in mq_parse_media_query() that allows remote atta

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-26 发布MEDIUM

libcss through 0.9.2 contains a NULL pointer dereference vulnerability in mq_parse_media_query() that allows remote attackers to crash consumers by supplying media lists ending ...

CVE-2026-116740

libcss through 0.9.2 contains a NULL pointer dereference vulnerability in mq_parse_media_query() that allows remote atta

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.4.0 until 1.22.0, ScanInferenceFunction, ScanInferenceFunction_opset8, and ...

CVE-2026-115921

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.4.0 until 1.22.0,

来源摘录 · NVD

安全公告2026-10-23 发布INFO

The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete...

CVE-2026-110491

The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete requests to certain operatio

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-21 发布INFO

Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images

CVE-2026-112392

``` ============================================================================ NULL dereference in ImagingExpand via r

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-21 发布INFO

Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0

CVE-2026-112405

### Summary `Image.merge()` checks the mode of every input band except band 0. If band 0 is a single-band `I` or `F` ima

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-21 发布INFO

Apache Traffic Server can crash with a null pointer dereference when a client POST request is torn down via half-close while a chunked origin response is being reparsed from a r...

CVE-2026-112381

Apache Traffic Server can crash with a null pointer dereference when a client POST request is torn down via half-close w

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

The MCTP-over-I2C+GPIO target binding in subsys/pmci/mctp/mctp_i2c_gpio_target.c emulates a small pseudo-register file, where the bus controller first writes a register number a...

CVE-2026-79976

The MCTP-over-I2C+GPIO target binding in subsys/pmci/mctp/mctp_i2c_gpio_target.c emulates a small pseudo-register file,

历史摘要 · 未重新核验 · NVD

安全公告2026-10-21 发布INFO

NULL pointer dereference in the MCTP I2C+GPIO target binding triggerable by a peer I2C controller

CVE-2026-79976

The MCTP-over-I2C+GPIO target binding in subsys/pmci/mctp/mctp_i2c_gpio_target.c emulates a small pseudo-register file,

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-21 发布HIGH

Uncontrolled resource consumption in the HTTP/2 (h2) receive path of Apache bRPC (version < 1.18.0) on all platforms allows a remote unauthenticated attacker to crash the server...

CVE-2026-78058

Uncontrolled resource consumption in the HTTP/2 (h2) receive path of Apache bRPC (version < 1.18.0) on all platforms all

来源摘录 · NVD

漏洞预警2026-10-21 发布INFO

A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type.

CVE-2026-105923

A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Typ

来源摘录 · NVD

安全公告2026-10-21 发布INFO

FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation...

CVE-2026-114046

FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend that accepts a null p

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-21 发布MEDIUM

FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend that accepts a null per-reader name in SCardGetStatusChange requests. A malici...

CVE-2026-114046

FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend that accepts a null p

来源摘录 · NVD

漏洞预警2026-10-20 发布INFO

HarfBuzz from 8.0.0 through 14.6.0 contains a NULL pointer dereference vulnerability in the experimental WebAssembly shaper host imports buffer_set_contents, face_create, and fo...

CVE-2026-113680

HarfBuzz from 8.0.0 through 14.6.0 contains a NULL pointer dereference vulnerability in the experimental WebAssembly sha

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function when msglen is s...

CVE-2026-43842

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function.

CVE-2026-43841

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on_disconnected callback function.

CVE-2026-43840

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash

来源摘录 · NVD

漏洞预警2026-10-20 发布INFO

A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service.

CVE-2026-43839

A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-19 发布INFO

Pillow is a Python imaging library. From 12.0.0 until 13.0.0, Pillow's Image.merge() can dereference a null image8 plane. Validation skips the first input band, allowing a 32-bi...

CVE-2026-112405

Pillow is a Python imaging library. From 12.0.0 until 13.0.0, Pillow's Image.merge() can dereference a null image8 plane

历史摘要 · 未重新核验 · NVD