#cwe-476

共收录 587 条相关情报。

← 返回所有主题
漏洞预警2026-10-13 发布INFO

mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks() in src/mp4file.cpp. This allows a remote attacker to cause a denial of service

CVE-2026-95122

mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks() in src/mp4file.cpp. This allo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

yt-dlp-web-ui through 4.0.0 contains a NULL pointer dereference vulnerability in the Service.Formats JSON-RPC method that allows remote unauthenticated attackers to crash the se...

CVE-2026-109967

yt-dlp-web-ui through 4.0.0 contains a NULL pointer dereference vulnerability in the Service.Formats JSON-RPC method tha

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

FreeRDP 2.3.0 before 3.32.0 dereferences a NULL stream in rdg_process_close_packet in libfreerdp/core/gateway/rdg.c because rdg_process_control_packet accepts a header-only PKT_...

CVE-2026-109942

FreeRDP 2.3.0 before 3.32.0 dereferences a NULL stream in rdg_process_close_packet in libfreerdp/core/gateway/rdg.c beca

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

FreeRDP 3.27.1 before 3.32.0 contains a NULL pointer dereference in update_read_cache_bitmap_v3_order() in libfreerdp/core/orders.c, which accesses the client bitmap cache when ...

CVE-2026-109939

FreeRDP 3.27.1 before 3.32.0 contains a NULL pointer dereference in update_read_cache_bitmap_v3_order() in libfreerdp/co

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

FreeRDP 3.0.0-beta4 before 3.32.0 contains a NULL pointer dereference in arm_handle_request_ok when an ARM endpoint returns an empty HTTP 200 body. Attackers controlling the con...

CVE-2026-109679

FreeRDP 3.0.0-beta4 before 3.32.0 contains a NULL pointer dereference in arm_handle_request_ok when an ARM endpoint retu

历史摘要 · 未重新核验 · NVD

安全公告2026-10-13 发布INFO

yt-dlp-web-ui through 4.0.0 NULL Pointer Dereference DoS via Service.Formats

CVE-2026-109967

yt-dlp-web-ui through 4.0.0 contains a NULL pointer dereference vulnerability in the Service.Formats JSON-RPC method tha

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-13 发布INFO

FreeRDP 2.3.0 before 3.32.0 NULL Pointer Dereference via RD Gateway Close Channel Packet

CVE-2026-109942

FreeRDP 2.3.0 before 3.32.0 dereferences a NULL stream in rdg_process_close_packet in libfreerdp/core/gateway/rdg.c beca

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-13 发布INFO

FreeRDP 3.27.1 before 3.32.0 NULL Pointer Dereference via Cache Bitmap V3 Order

CVE-2026-109939

FreeRDP 3.27.1 before 3.32.0 contains a NULL pointer dereference in update_read_cache_bitmap_v3_order() in libfreerdp/co

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-13 发布INFO

FreeRDP 3.0.0-beta4 before 3.32.0 NULL Pointer Crash via ARM Response

CVE-2026-109679

FreeRDP 3.0.0-beta4 before 3.32.0 contains a NULL pointer dereference in arm_handle_request_ok when an ARM endpoint retu

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-13 发布INFO

A weakness has been identified in Wavlink WL-WN592AX6 250422. Affected by this issue is the function main of the file /cgi-bin/upload.cgi. This manipulation of the argument Cook...

CVE-2026-109107

A weakness has been identified in Wavlink WL-WN592AX6 250422. Affected by this issue is the function main of the file /c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

ImageMagick 7.1.0-20 before 7.1.2-32 contains a use after free vulnerability in the -fx option that occurs when a memory allocation fails during a specific operation. Attackers ...

CVE-2026-109280

ImageMagick 7.1.0-20 before 7.1.2-32 contains a use after free vulnerability in the -fx option that occurs when a memory

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a craft...

CVE-2026-109272

ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered whe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the fx operation that occurs when initialization of an FX runtime entry fails. Attackers ca...

CVE-2026-109258

ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the fx operation that occurs when

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

FreeRDP from 3.9.0 before 3.32.0 contains a NULL pointer dereference vulnerability in the RDPEAR NDR reader that allows malicious servers to crash clients via truncated KERB_RPC...

CVE-2026-109252

FreeRDP from 3.9.0 before 3.32.0 contains a NULL pointer dereference vulnerability in the RDPEAR NDR reader that allows

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the client video redirection channel that allows malicious servers to crash clients by sending out-of-...

CVE-2026-109241

FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the client video redirection channel that all

历史摘要 · 未重新核验 · NVD

安全公告2026-10-12 发布INFO

ImageMagick 7.1.0-20 before 7.1.2-32 Use After Free via -fx Option

CVE-2026-109280

ImageMagick 7.1.0-20 before 7.1.2-32 contains a use after free vulnerability in the -fx option that occurs when a memory

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-12 发布INFO

ImageMagick 7.1.1-31 before 7.1.2-32 Null Pointer Dereference in PostScript Decoder

CVE-2026-109272

ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered whe

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-12 发布INFO

ImageMagick 7.1.0-20 before 7.1.2-32 Invalid Memory Free in FX Operation

CVE-2026-109258

ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the fx operation that occurs when

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-11 发布INFO

i2s_esp32_trigger_check() in drivers/i2s/i2s_esp32.c validates the requested direction only for I2S_DIR_BOTH. The I2S_DIR_RX and I2S_DIR_TX branches read dev_cfg->rx.data->confi...

CVE-2026-19737

i2s_esp32_trigger_check() in drivers/i2s/i2s_esp32.c validates the requested direction only for I2S_DIR_BOTH. The I2S_DI

历史摘要 · 未重新核验 · NVD

安全公告2026-10-11 发布INFO

NULL pointer dereference in the ESP32 I2S driver when triggering an unsupported direction

CVE-2026-19737

i2s_esp32_trigger_check() in drivers/i2s/i2s_esp32.c validates the requested direction only for I2S_DIR_BOTH. The I2S_DI

历史摘要 · 未重新核验 · OSV.dev