| CVE-2025-15156 | omec-project UPF PFCP Session Establishment Request messages_session.go handleSessionEstablishmentRequest null pointer dereference — UPF | 4.3 | Medium | 2025-12-28 |
| CVE-2025-14180 | NULL Pointer Dereference in PDO quoting — PHP | 7.5 | - | 2025-12-27 |
| CVE-2025-14501 | Sante PACS Server HTTP Content-Length Header Handling NULL Pointer Dereference Denial-of-Service Vulnerability — PACS Server | 7.5AI | HighAI | 2025-12-23 |
| CVE-2025-14957 | WebAssembly Binaryen IRBuilder wasm-ir-builder.cpp makeLocalTee null pointer dereference — Binaryen | 3.3 | Low | 2025-12-19 |
| CVE-2025-14953 | Open5GS FAR-ID handler.c ogs_pfcp_handle_create_pdr null pointer dereference — Open5GS | 3.1 | Low | 2025-12-19 |
| CVE-2025-14841 | OFFIS DCMTK dcmqrscp dcmqrdbi.cc startMoveRequest null pointer dereference — DCMTK | 3.3 | Low | 2025-12-18 |
| CVE-2025-66646 | RIOT-OS has NULL pointer dereference in gnrc_ipv6_ext_frag_reass — RIOT | 7.5AI | HighAI | 2025-12-17 |
| CVE-2025-68274 | SIPGO library has response DoS vulnerability via nil pointer dereference — sipgo | 7.5AI | HighAI | 2025-12-16 |
| CVE-2025-62848 | QTS, QuTS hero — QTS | 7.5AI | HighAI | 2025-12-16 |
| CVE-2025-62465 | DirectX Graphics Kernel Denial of Service Vulnerability — Windows 11 version 22H3 | 6.5 | Medium | 2025-12-09 |
| CVE-2025-62463 | DirectX Graphics Kernel Denial of Service Vulnerability — Windows 10 Version 21H2 | 6.5 | Medium | 2025-12-09 |
| CVE-2025-62466 | Windows Client-Side Caching Elevation of Privilege Vulnerability — Windows 10 Version 1607 | 7.8 | High | 2025-12-09 |
| CVE-2025-14309 | ravynOS 安全漏洞 — ravynos | 7.5 | High | 2025-12-09 |
| CVE-2025-6966 | Null-pointer dereference in python-apt TagSection.keys() — python-apt | 5.5 | - | 2025-12-05 |
| CVE-2025-64527 | Envoy crashes when JWT authentication is configured with the remote JWKS fetching — envoy | 6.5 | Medium | 2025-12-03 |
| CVE-2025-20750 | MediaTek Chipsets 安全漏洞 — MT2735, MT6833, MT6833P, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6880, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT8675, MT8771, MT8791, MT8791T, MT8797 | 7.5AI | HighAI | 2025-12-02 |
| CVE-2025-20790 | MediaTek Chipsets 安全漏洞 — MT2735, MT6833, MT6833P, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6880, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT8675, MT8771, MT8791, MT8791T, MT8797 | 7.5AI | HighAI | 2025-12-02 |
| CVE-2025-20755 | MediaTek Chipsets 安全漏洞 — MT2735, MT6833, MT6833P, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6880, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT8675, MT8771, MT8791, MT8791T, MT8797 | 7.5AI | HighAI | 2025-12-02 |
| CVE-2025-7007 | Null pointer dereference in Avast Antivirus on macOS (16.0.0) or Linux (3.0.3) — Antivirus | 7.5 | High | 2025-12-01 |
| CVE-2025-11156 | Improper Service Loading Vulnerability in Netskope Endpoint DLP Driver — Netskope Client | 4.4 | - | 2025-11-28 |
| CVE-2025-64335 | Suricata is vulnerable to a null deref when used with base64_data — suricata | 7.5 | High | 2025-11-26 |
| CVE-2025-33197 | NVIDIA DGX Spark 代码问题漏洞 — DGX Spark | 4.3 | Medium | 2025-11-25 |
| CVE-2025-62609 | MLX has Wild Pointer Dereference in load_gguf() — mlx | 5.5 | - | 2025-11-21 |
| CVE-2025-13425 | Denial of Service in OSV-SCALIBR — OSV-SCALIBR | 6.2 | - | 2025-11-20 |
| CVE-2025-13397 | mrubyc alloc.c mrbc_raw_realloc null pointer dereference — mrubyc | 3.3 | Low | 2025-11-19 |
| CVE-2025-59777 | GNU libmicrohttpd 代码问题漏洞 — GNU libbmicrohttpd | 7.5 | - | 2025-11-10 |
| CVE-2025-7700 | Ffmpeg: null pointer dereference in ffmpeg als decoder (libavcodec/alsdec.c) | 5.3 | Medium | 2025-11-07 |
| CVE-2025-47207 | File Station 5 — File Station 5 | 7.5 | - | 2025-11-07 |
| CVE-2025-52865 | File Station 5 — File Station 5 | 7.5 | - | 2025-11-07 |
| CVE-2025-53408 | File Station 5 — File Station 5 | 7.5 | - | 2025-11-07 |