#cwe-476

共收录 587 条相关情报。

← 返回所有主题

漏洞预警2026-05-06 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: validate sequence number of TX release report Hardware rarely reports abnormal sequence n...

CVE-2026-43213

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: validate sequence number of TX re

来源摘录 · NVD

#cve #cwe-125 #cwe-476

漏洞预警2026-05-06 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: Drop the MHI auto_queue feature for IPCR DL channels MHI stack offers the 'auto_queue' feature, ...

CVE-2025-71285

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: Drop the MHI auto_queue feature for IPCR

来源摘录 · NVD

#cve #cwe-476

漏洞预警2026-05-06 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data() We need to check __in6_dev_get() f...

CVE-2026-43101

In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: fix potential NULL dereferences in __io

来源摘录 · NVD

#cve #cwe-476

安全公告2026-05-05 发布INFO

GoBGP has a panic in AdjRib.Update via malformed BGP Update message (Nil Pointer Dereference)

CVE-2026-42285

### Summary Remote Denial of Service (DoS) via Nil Pointer Dereference in BGP Update Processing An unauthenticated remot

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-476 #severity:high

安全公告2026-05-04 发布INFO

Argo Affected by SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go)

CVE-2026-42183

### Summary A nil pointer dereference in `server/auth/gatekeeper.go` `rbacAuthorization()` causes a panic (denial of ser

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-476 #severity:low

漏洞预警2026-05-04 发布INFO

A NULL pointer dereference in the mod_authn_socache in Apache HTTP Server 2.4.66 and earlier allows an unauthenticated remote user to crash a child process in a caching forward ...

CVE-2026-33007

A NULL pointer dereference in the mod_authn_socache in Apache HTTP Server 2.4.66 and earlier allows an unauthenticated r

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

漏洞预警2026-05-04 发布INFO

A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the server with a malicious request.mod_dav_lock is not used i...

CVE-2026-29169

A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the s

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

漏洞预警2026-05-04 发布INFO

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXMeshGeometry.cpp, MeshGeometry::MeshGeometry()

CVE-2025-70070

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXMeshGeometry.cpp, MeshGeomet

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

漏洞预警2026-05-04 发布INFO

mutt before 2.3.2 has a show_sig_summary NULL pointer dereference.

CVE-2026-43864

mutt before 2.3.2 has a show_sig_summary NULL pointer dereference.

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

漏洞预警2026-05-03 发布INFO

A security vulnerability has been detected in Telegram Desktop up to 6.7.5. This vulnerability affects the function RequestButton of the file Telegram/SourceFiles/boxes/url_auth...

CVE-2026-7701

A security vulnerability has been detected in Telegram Desktop up to 6.7.5. This vulnerability affects the function Requ

历史摘要 · 未重新核验 · NVD

#cve #cwe-404 #cwe-476

安全公告2026-05-02 发布INFO

IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.4

CVE-2026-6525

IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.4

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-476 #severity:medium

漏洞预警2026-05-02 发布INFO

IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.4

CVE-2026-6525

IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.4

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

漏洞预警2026-05-01 发布INFO

An issue was discovered in VrmlData_IndexedFaceSet::TShape in the VRML V2.0 parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 allows attackers to cause a denial of service via...

CVE-2026-42478

An issue was discovered in VrmlData_IndexedFaceSet::TShape in the VRML V2.0 parser in Open CASCADE Technology (OCCT) V8_

历史摘要 · 未重新核验 · NVD

#cve #cwe-476 #cwe-125

漏洞预警2026-04-30 发布INFO

NULL pointer dereference vulnerability in ASR1903 in ASR Lapwing_Linux on Linux (ims_client modules) allows Pointer Manipulation. This vulnerability is associated with program...

CVE-2026-42800

NULL pointer dereference vulnerability in ASR1903 in ASR Lapwing_Linux on Linux (ims_client modules) allows Pointer Mani

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

安全公告2026-04-30 发布INFO

RTSP protocol dissector crash in Wireshark 4.6.0 to 4.6.4

CVE-2026-6526

RTSP protocol dissector crash in Wireshark 4.6.0 to 4.6.4

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-476 #severity:medium

漏洞预警2026-04-30 发布INFO

RTSP protocol dissector crash in Wireshark 4.6.0 to 4.6.4

CVE-2026-6526

RTSP protocol dissector crash in Wireshark 4.6.0 to 4.6.4

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

安全公告2026-04-30 发布INFO

Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-7376

Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-476 #severity:medium

漏洞预警2026-04-30 发布INFO

Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-7376

Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

历史摘要 · 未重新核验 · NVD

#cve #cwe-476

安全公告2026-04-28 发布INFO

In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application...

CVE-2026-40355

In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_c

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-476 #severity:medium

漏洞预警2026-04-28 发布INFO

In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered i...

CVE-2026-40355

In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_c

历史摘要 · 未重新核验 · NVD

#cve #cwe-476