#cwe-476

共收录 587 条相关情报。

← 返回所有主题
漏洞预警2026-06-09 发布INFO

Issue summary: An attacker-controlled CMP (Certificate Management Protocol) server could trigger a NULL pointer dereference in a CMP client application. Impact summary: A NULL ...

CVE-2026-42767

Issue summary: An attacker-controlled CMP (Certificate Management Protocol) server could trigger a NULL pointer derefere

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer dereference le...

CVE-2026-42766

Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Issue summary: When a partial-chain certificate verification is enabled together with OCSP response checking for the whole chain, a NULL dereference will happen if the verified ...

CVE-2026-42765

Issue summary: When a partial-chain certificate verification is enabled together with OCSP response checking for the who

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Issue summary: Receiving a QUIC initial packet with an invalid token may trigger a NULL pointer dereference in the OpenSSL QUIC server with address validation disabled. Impact ...

CVE-2026-42764

Issue summary: Receiving a QUIC initial packet with an invalid token may trigger a NULL pointer dereference in the OpenS

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote a...

CVE-2026-11788

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before us

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-08 发布INFO

A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller. The WINS protocol handlers for certain request types did not properly va...

CVE-2026-3238

A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller. The WINS protoc

历史摘要 · 未重新核验 · NVD

安全公告2026-06-05 发布INFO

Klever-Go KVM: Unauthenticated remote node crash (nil-pointer DoS) in klever-go P2P transaction interceptor (txVersionChecker nil RawData) - potential chain halt

## Summary Every transaction gossiped on the klever-go P2P network is decoded and validated synchronously inside the lib

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-03 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Add missing NULL check for alloc_workqueue() alloc_workqueue() can return NULL on memory all...

CVE-2025-71313

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Add missing NULL check for alloc_wor

来源摘录 · NVD

漏洞预警2026-06-03 发布INFO

A NULL pointer dereference in the gf_filter_pid_resolve_file_template_ex function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a D...

CVE-2025-60477

A NULL pointer dereference in the gf_filter_pid_resolve_file_template_ex function (/filter_core/filter_pid.c) of GPAC Pr

历史摘要 · 未重新核验 · NVD

安全公告2026-06-02 发布INFO

Improper input validation in the NI-PAL kernel driver may allow a local authenticated user to...

CVE-2026-8035

Improper input validation in the NI-PAL kernel driver may allow a local authenticated user to cause a denial of service

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-02 发布INFO

Improper input validation in the NI-PAL kernel driver may allow a local authenticated user to cause a denial of service by triggering a crash due to a NULL pointer dereference. ...

CVE-2026-8035

Improper input validation in the NI-PAL kernel driver may allow a local authenticated user to cause a denial of service

历史摘要 · 未重新核验 · NVD

安全公告2026-06-02 发布INFO

Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion...

CVE-2025-59606

Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

Memory Corruption when running a memory copy operation due to invalid writes caused by a null...

CVE-2025-59604

Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-01 发布INFO

A security flaw has been discovered in ggml-org whisper.cpp up to 1.8.2. This vulnerability affects the function whisper_model_load of the file ggml/src/ggml.c. The manipulation...

CVE-2026-10298

A security flaw has been discovered in ggml-org whisper.cpp up to 1.8.2. This vulnerability affects the function whisper

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization.

CVE-2025-59606

Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.

CVE-2025-59604

Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

In fixInitiatingUserIfNecessary of CallIntentProcessor.java, there is a possible way to make an emergency call due to a logic error in the code. This could lead to local with n...

CVE-2026-28581

In fixInitiatingUserIfNecessary of CallIntentProcessor.java, there is a possible way to make an emergency call due to a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

A NULL pointer dereference in the ext4_dir_en_get_name_len function in include/ext4_dir.h of lwext4 1.0.0 allows attackers to cause a denial of service by supplying a specially ...

CVE-2025-70099

A NULL pointer dereference in the ext4_dir_en_get_name_len function in include/ext4_dir.h of lwext4 1.0.0 allows attacke

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine. Prior to version 1.0.5, a null pointer dereference in SvgLoader::run() allows any caller that passes ...

CVE-2026-45729

Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine. Prior to version 1.0.5, a null pointer deref

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

FlexRIC v2.0.0 crashes when the near-RT RIC receives a RIC_INDICATION message with a ran_func_id that does not exist in its registry. The lookup returns NULL, triggering assert(...

CVE-2026-37230

FlexRIC v2.0.0 crashes when the near-RT RIC receives a RIC_INDICATION message with a ran_func_id that does not exist in

历史摘要 · 未重新核验 · NVD