CVE-2025-4478 is a vulnerability in FreeRDP used by Anaconda's remote install feature. A crafted RDP packet can cause a NULL pointer dereference leading to a segmentation fault, crashing the service and causing a denial of service. Recovery requires a system reboot. The flaw affects version 3.0.0-beta1 of FreeRDP. A security update is available from Red Hat for affected products.
CVE-2025-46400 is a vulnerability in the xfig diagramming tool where a NULL pointer dereference in the read_arcobject function causes a segmentation fault during fig2dev execution. This leads to a denial of service via local input manipulation. The vulnerability requires local access with low privileges and no user interaction. The impact is limited to integrity, with no confidentiality or availability impact reported.
CVE-2025-46399 is a vulnerability in the fig2dev utility of the xfig software that allows a local attacker with low privileges to cause a denial of service by triggering a NULL pointer dereference in the genge_itp_spline function. This results in a segmentation fault and crashes the process. The vulnerability affects Red Hat Enterprise Linux and Red Hat In-Vehicle OS. The issue is rated as moderate severity with a CVSS score of 5.5.
CVE-2025-37860 is a medium severity vulnerability in the Linux kernel involving NULL pointer dereferences in the ef100_process_design_param() function of the sfc driver. The issue arises because certain functions run before the network device is created, leading to unsafe calls that can cause kernel crashes. The problem was fixed by moving network interface calls to a safer initialization phase and improving error reporting.
CVE-2025-22070 is a vulnerability in the Linux kernel's 9p filesystem client that causes a NULL pointer dereference when creating a subdirectory with the 'posixacl' mount option and default ACLs set on the parent directory. This results in a kernel crash (denial of service). The issue is due to an incorrect sequence of function calls in the mkdir operation, where a pointer is set to NULL before it is used. The fix involves swapping the order of these calls to prevent the NULL pointer dereference.
CVE-2025-32912 is a vulnerability in libsoup's SoupAuthDigest component that can cause a NULL pointer dereference. This flaw may lead to a crash of the libsoup client when the HTTP server omits the "nonce" parameter in an Unauthorized response during Digest authentication. The issue has a CVSS score of 6.5, indicating a medium severity denial of service impact.
CVE-2025-32910 is a vulnerability in libsoup where the function soup_auth_digest_authenticate() can dereference a NULL pointer if the server omits the "realm" parameter in an Unauthorized response using Digest authentication. This flaw may cause the libsoup client to crash, resulting in a denial of service condition.
CVE-2025-32909 is a vulnerability in libsoup where the SoupContentSniffer component may dereference a NULL pointer in the sniff_mp4 function. This flaw can cause the libsoup client to crash when interacting with an HTTP server. The issue is classified as a medium severity denial of service vulnerability with a CVSS score of 5.3. Red Hat has issued an advisory including this vulnerability among others and provides updates to address it.
CVE-2025-32913 is a vulnerability in libsoup's soup_message_headers_get_content_disposition() function that causes a NULL pointer dereference. This flaw can be triggered by a malicious HTTP peer sending a Content-Disposition header with a filename parameter that is present but has no value, leading to a crash of the libsoup client or server using this function.
XZ Utils provide a general-purpose data-compression library plus command-line tools. In XZ Utils 5.3.3alpha to 5.8.0, the multithreaded .xz decoder in liblzma has a bug where invalid input can at least result in a crash. The effects include heap use after free and writing to an address based on the null pointer plus an offset. Applications and libraries that use the lzma_stream_decoder_mt function are affected. The bug has been fixed in XZ Utils 5.8.1, and the fix has been committed to the v5.4, v5.6, v5.8, and master branches in the xz Git repository. No new release packages will be made from the old stable branches, but a standalone patch is available that applies to all affected releases.
CVE-2025-31181 is a vulnerability in gnuplot where the X11_graphics() function can cause a NULL pointer dereference leading to a segmentation fault and system crash. The flaw requires local access to exploit and impacts availability without affecting confidentiality or integrity. No mitigation or fix is currently available.
CVE-2025-31180 is a vulnerability in gnuplot where the CANVAS_text() function can cause a NULL pointer dereference leading to a segmentation fault and system crash. The flaw requires local access to exploit and impacts availability by causing a denial of service. No confidentiality or integrity impact is reported. Currently, no mitigation or patch is available for this issue.
CVE-2025-31179 is a vulnerability in gnuplot where the xstrftime() function can cause a NULL pointer dereference, leading to a segmentation fault and system crash. The flaw affects availability but does not impact confidentiality or integrity. The vulnerability requires local access to exploit and does not require user interaction or privileges. Currently, no mitigation or patch is available.
CVE-2025-31178 is a vulnerability in gnuplot where the GetAnnotateString() function can cause a NULL pointer dereference leading to a segmentation fault and system crash. The flaw impacts availability but does not affect confidentiality or integrity. The attacker must have local access to exploit this issue. No official patch or mitigation is currently available.
CVE-2025-31176 is a vulnerability in gnuplot's plot3d_points() function that can cause a NULL pointer dereference, leading to a segmentation fault and system crash. The flaw impacts availability but does not affect confidentiality or integrity. The vulnerability requires local access to exploit and has a medium severity rating with a CVSS score of 6.2. Currently, no mitigation or patch is available from the vendor.
CVE-2025-2487 is a vulnerability in the 389-ds-base LDAP server where a NULL pointer dereference occurs during a Modify DN LDAP operation if a privileged user issues a MODDN operation after a failed operation. This flaw can cause a denial of service or system crash. The issue affects specific versions of 389-ds-base and has a CVSS score of 4.9 (medium severity). A security update is available from Red Hat to address this vulnerability.
Various Paragon Software products contain a null pointer dereference vulnerability within biontdrv.sys that is caused by a lack of a valid MasterLrp structure in the input buffer, allowing an attacker to execute arbitrary code in the kernel, facilitating privilege escalation.
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00791311 / MOLY01067019; Issue ID: MSV-2721.