CWE-476 · NULL Pointer Dereference (page 42)
Page 42 of 57 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-39585 | Medium | 5.5 | 2021-09-20 | An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function traits_dump() located in abc.c. It allows an attacker t… |
CVE-2021-39584 | Medium | 5.5 | 2021-09-20 | An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function namespace_set_hash() located in pool.c. It allows an at… |
CVE-2021-39583 | Medium | 5.5 | 2021-09-20 | An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function pool_lookup_string2() located in pool.c. It allows an a… |
CVE-2021-39575 | Medium | 5.5 | 2021-09-20 | An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function dump_method() located in abc.c. It allows an attacker t… |
CVE-2021-39563 | Medium | 5.5 | 2021-09-20 | An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swf_DumpActions() located in swfaction.c. It allows an… |
CVE-2021-39562 | Medium | 5.5 | 2021-09-20 | An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function FileStream::makeSubStream() located in Stream.cc. It al… |
CVE-2021-39559 | Medium | 5.5 | 2021-09-20 | An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function GString::~GString() located in GString.cc. It allows an… |
CVE-2021-39557 | Medium | 5.5 | 2021-09-20 | An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function copyString() located in gmem.cc. It allows an attacker… |
CVE-2021-39556 | Medium | 5.5 | 2021-09-20 | An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function InfoOutputDev::type3D1() located in InfoOutputDev.cc. I… |
CVE-2021-39555 | Medium | 5.5 | 2021-09-20 | An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function InfoOutputDev::type3D0() located in InfoOutputDev.cc. I… |
CVE-2021-39554 | Medium | 5.5 | 2021-09-20 | An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function Lexer::Lexer() located in Lexer.cc. It allows an attack… |
CVE-2021-39553 | Medium | 5.5 | 2021-09-20 | An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function grealloc() located in gmem.cc. It allows an attacker to… |
CVE-2021-39549 | Medium | 5.5 | 2021-09-20 | An issue was discovered in sela through 20200412. A NULL pointer dereference exists in the function file::WavFile::WavFile() located in wav_file.c. It allows a… |
CVE-2021-39548 | Medium | 5.5 | 2021-09-20 | An issue was discovered in sela through 20200412. A NULL pointer dereference exists in the function frame::FrameDecoder::process() located in frame_decoder.c… |
CVE-2021-39547 | Medium | 5.5 | 2021-09-20 | An issue was discovered in sela through 20200412. A NULL pointer dereference exists in the function lpc::SampleGenerator::process() located in sample_generator… |
CVE-2021-39545 | Medium | 5.5 | 2021-09-20 | An issue was discovered in sela through 20200412. A NULL pointer dereference exists in the function rice::RiceDecoder::process() located in rice_decoder.c. It… |
CVE-2021-39543 | Medium | 5.5 | 2021-09-20 | An issue was discovered in pdftools through 20200714. A NULL pointer dereference exists in the function Analyze::AnalyzeRoot() located in analyze.cpp. It allow… |
CVE-2021-39542 | Medium | 5.5 | 2021-09-20 | An issue was discovered in pdftools through 20200714. A NULL pointer dereference exists in the function Font::Size() located in font.cpp. It allows an attacker… |
CVE-2021-39541 | Medium | 5.5 | 2021-09-20 | An issue was discovered in pdftools through 20200714. A NULL pointer dereference exists in the function Analyze::AnalyzeXref() located in analyze.cpp. It allow… |
CVE-2021-39539 | Medium | 5.5 | 2021-09-20 | An issue was discovered in pdftools through 20200714. A NULL pointer dereference exists in the function node::BDCNode::~BDCNode() located in bdcnode.cpp. It al… |
CVE-2021-39538 | Medium | 5.5 | 2021-09-20 | An issue was discovered in pdftools through 20200714. A NULL pointer dereference exists in the function node::ObjNode::Value() located in objnode.cpp. It allow… |
CVE-2021-39535 | Medium | 6.5 | 2021-09-20 | An issue was discovered in libxsmm through v1.16.1-93. A NULL pointer dereference exists in JIT code. It allows an attacker to cause Denial of Service. |
CVE-2021-39532 | Medium | 6.5 | 2021-09-20 | An issue was discovered in libslax through v0.22.1. A NULL pointer dereference exists in the function slaxLexer() located in slaxlexer.c. It allows an attacker… |
CVE-2021-39523 | Medium | 6.5 | 2021-09-20 | An issue was discovered in libredwg through v0.10.1.3751. A NULL pointer dereference exists in the function check_POLYLINE_handles() located in decode.c. It al… |
CVE-2021-39521 | Medium | 6.5 | 2021-09-20 | An issue was discovered in libredwg through v0.10.1.3751. A NULL pointer dereference exists in the function bit_read_BB() located in bits.c. It allows an attac… |
CVE-2021-39520 | Medium | 6.5 | 2021-09-20 | An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function BlockBitmapRequester::PushReconstructedData() located in… |
CVE-2021-39519 | Medium | 6.5 | 2021-09-20 | An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function BlockBitmapRequester::PullQData() located in blockbitmapr… |
CVE-2021-39517 | Medium | 6.5 | 2021-09-20 | An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function BlockBitmapRequester::ReconstructUnsampled() located in b… |
CVE-2021-39516 | Medium | 6.5 | 2021-09-20 | An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function HuffmanDecoder::Get() located in huffmandecoder.hpp. It a… |
CVE-2021-39515 | Medium | 6.5 | 2021-09-20 | An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function SampleInterleavedLSScan::ParseMCU() located in sampleinte… |
CVE-2021-32289 | Medium | 5.5 | 2021-09-20 | An issue was discovered in heif through through v3.6.2. A NULL pointer dereference exists in the function convertByteStreamToRBSP() located in nalutil.cpp. It… |
CVE-2021-32285 | Medium | 5.5 | 2021-09-20 | An issue was discovered in gravity through 0.8.1. A NULL pointer dereference exists in the function list_iterator_next() located in gravity_core.c. It allows a… |
CVE-2021-32284 | High | 7.8 | 2021-09-20 | An issue was discovered in gravity through 0.8.1. A NULL pointer dereference exists in the function ircode_register_pop_context_protect() located in gravity_ir… |
CVE-2021-32283 | Medium | 5.5 | 2021-09-20 | An issue was discovered in gravity through 0.8.1. A NULL pointer dereference exists in the function gravity_string_to_value() located in gravity_value.c. It al… |
CVE-2021-32282 | Medium | 5.5 | 2021-09-20 | An issue was discovered in gravity through 0.8.1. A NULL pointer dereference exists in the function ircode_add_check() located in gravity_ircode.c. It allows a… |
CVE-2021-32280 | Medium | 5.5 | 2021-09-20 | An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function compute_closed_spline() located in trans_spline.c. It allow… |
CVE-2021-32276 | Medium | 5.5 | 2021-09-20 | An issue was discovered in faad2 through 2.10.0. A NULL pointer dereference exists in the function get_sample() located in output.c. It allows an attacker to c… |
CVE-2021-32275 | Medium | 5.5 | 2021-09-20 | An issue was discovered in faust through v2.30.5. A NULL pointer dereference exists in the function CosPrim::computeSigOutput() located in cosprim.hh. It allow… |
CVE-2021-32270 | Medium | 5.5 | 2021-09-20 | An issue was discovered in gpac through 20200801. A NULL pointer dereference exists in the function vwid_box_del located in box_code_base.c. It allows an attac… |
CVE-2021-32269 | Medium | 5.5 | 2021-09-20 | An issue was discovered in gpac through 20200801. A NULL pointer dereference exists in the function ilst_item_box_dump located in box_dump.c. It allows an atta… |
CVE-2020-20896 | High | 8.8 | 2021-09-20 | An issue was discovered in function latm_write_packet in libavformat/latmenc.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecif… |
CVE-2021-1939 | High | 8.4 | 2021-09-17 | Null pointer dereference occurs due to improper validation when the preemption feature enablement is toggled in Snapdragon Auto, Snapdragon Compute, Snapdragon… |
CVE-2021-34798 | High | 7.5 | 2021-09-16 | Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier. |
CVE-2021-38177 | High | 7.5 | 2021-09-14 | SAP CommonCryptoLib version 8.5.38 or lower is vulnerable to null pointer dereference vulnerability when an unauthenticated attacker sends crafted malicious da… |
CVE-2021-32139 | Medium | 5.5 | 2021-09-13 | The gf_isom_vp_config_get function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box comm… |
CVE-2021-32138 | Medium | 5.5 | 2021-09-13 | The DumpTrackInfo function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command. |
CVE-2021-32135 | Medium | 5.5 | 2021-09-13 | The trak_box_size function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command. |
CVE-2021-32132 | Medium | 5.5 | 2021-09-13 | The abst_box_size function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command. |
CVE-2021-32134 | Medium | 5.5 | 2021-09-13 | The gf_odf_desc_copy function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command. |
CVE-2021-25462 | Low | 3.3 | 2021-09-09 | NULL pointer dereference vulnerability in NPU driver prior to SMR Sep-2021 Release 1 allows attackers to cause memory corruption. |
CVE-2021-25458 | Low | 3.3 | 2021-09-09 | NULL pointer dereference vulnerability in ION driver prior to SMR Sep-2021 Release 1 allows attackers to cause memory corruption. |
CVE-2021-30294 | High | 8.4 | 2021-09-09 | Potential null pointer dereference in KGSL GPU auxiliary command due to improper validation of user input in Snapdragon Auto, Snapdragon Connectivity, Snapdrag… |
CVE-2021-30290 | High | 8.4 | 2021-09-09 | Possible null pointer dereference due to race condition between timeline fence signal and time line fence destroy in Snapdragon Auto, Snapdragon Connectivity… |
CVE-2021-1946 | Critical | 9.8 | 2021-09-09 | Null Pointer Dereference may occur due to improper validation while processing crafted SDP body in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… |
CVE-2021-1935 | High | 7.1 | 2021-09-09 | Possible null pointer dereference due to lack of validation check for passed pointer during key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Conne… |
CVE-2021-34737 | Medium | 5.8 | 2021-09-09 | A vulnerability in the DHCP version 4 (DHCPv4) server feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to trigger a crash of th… |
CVE-2021-30698 | High | 7.5 | 2021-09-08 | A null pointer dereference was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.4, Safari 14.1.1, iOS 14.6 and iPadOS 14.6. A… |
CVE-2020-19752 | High | 7.5 | 2021-09-07 | The find_color_or_error function in gifsicle 1.92 contains a NULL pointer dereference. |
CVE-2021-39251 | High | 7.8 | 2021-09-07 | A crafted NTFS image can cause a NULL pointer dereference in ntfs_extent_inode_open in NTFS-3G < 2021.8.22. |
CVE-2021-22792 | High | 7.5 | 2021-09-02 | A CWE-476: NULL Pointer Dereference vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller a… |
CVE-2021-28601 | Low | 3.3 | 2021-08-24 | Adobe After Effects version 18.2 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticate… |
CVE-2020-18731 | High | 7.5 | 2021-08-23 | A segmentation violation in the Iec104_Deal_FirmUpdate function of IEC104 v1.0 allows attackers to cause a denial of service (DOS). |
CVE-2020-18730 | High | 7.5 | 2021-08-23 | A segmentation violation in the Iec104_Deal_I function of IEC104 v1.0 allows attackers to cause a denial of service (DOS). |
CVE-2021-37750 | Medium | 6.5 | 2021-08-23 | The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a… |
CVE-2021-35985 | Medium | 5.5 | 2021-08-20 | Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by a Null pointer dereferen… |
CVE-2021-35984 | Medium | 5.5 | 2021-08-20 | Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by a Null pointer dereferen… |
CVE-2020-23331 | High | 7.5 | 2021-08-17 | An issue was discovered in Bento4 version 06c39d9. A NULL pointer dereference exists in the AP4_DescriptorListWriter::Action component located in /Core/Ap4Desc… |
CVE-2020-23330 | High | 7.5 | 2021-08-17 | An issue was discovered in Bento4 version 06c39d9. A NULL pointer dereference exists in the AP4_Stz2Atom::GetSampleSize component located in /Core/Ap4Stz2Atom… |
CVE-2021-37689 | High | 7.8 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can craft a TFLite model that would trigger a null poin… |
CVE-2021-37688 | High | 7.8 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can craft a TFLite model that would trigger a null poin… |
CVE-2021-37681 | High | 7.8 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of SVDF in TFLite is [vulnerable to a null point… |
CVE-2021-37648 | High | 7.8 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions the code for `tf.raw_ops.SaveV2` does not properly validate the inp… |
CVE-2021-37659 | High | 7.3 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to… |
CVE-2021-37649 | High | 7.7 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. The code for `tf.raw_ops.UncompressElement` can be made to trigger a null pointer derefe… |
CVE-2021-37647 | High | 7.7 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. When a user does not supply arguments that determine a valid sparse tensor, `tf.raw_ops… |
CVE-2021-37643 | High | 7.7 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. If a user does not provide a valid padding value to `tf.raw_ops.MatrixDiagPartOp`, then… |
CVE-2021-37639 | High | 8.4 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. When restoring tensors via raw APIs, if the tensor name is not provided, TensorFlow can… |
CVE-2021-37638 | High | 7.7 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. Sending invalid argument for `row_partition_types` of `tf.raw_ops.RaggedTensorToTensor`… |
CVE-2021-37637 | High | 7.7 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. It is possible to trigger a null pointer dereference in TensorFlow by passing an invalid… |
CVE-2021-38604 | High | 7.5 | 2021-08-12 | In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer d… |
CVE-2021-38567 | High | 7.5 | 2021-08-11 | An issue was discovered in Foxit PDF Editor before 11.0.1 and PDF Reader before 11.0.1 on macOS. It mishandles missing dictionary entries, leading to a NULL po… |
CVE-2021-1112 | Medium | 5.5 | 2021-08-11 | NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where a null pointer dereference may lead to complete denial of service. |
CVE-2021-32440 | Medium | 5.5 | 2021-08-11 | The Media_RewriteODFrame function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box comma… |
CVE-2021-32438 | Medium | 5.5 | 2021-08-11 | The gf_media_export_filters function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box co… |
CVE-2021-32437 | Medium | 5.5 | 2021-08-11 | The gf_hinter_finalize function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command. |
CVE-2021-29296 | High | 7.5 | 2021-08-10 | Null Pointer Dereference vulnerability in D-Link DIR-825 2.10b02, which could let a remote malicious user cause a denial of service. The vulnerability could be… |
CVE-2021-29295 | High | 7.5 | 2021-08-10 | Null Pointer Dereference vulnerability exists in D-Link DSP-W215 1.10, which could let a remote malicious user cause a denial of servie via usr/bin/lighttpd. I… |
CVE-2021-29294 | High | 7.5 | 2021-08-10 | Null Pointer Dereference vulnerability exists in D-Link DSL-2740R UK_1.01, which could let a remove malicious user cause a denial of service via the send_hnap_… |
CVE-2021-28845 | High | 7.5 | 2021-08-10 | Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could… |
CVE-2021-28844 | High | 7.5 | 2021-08-10 | Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03 by sending t… |
CVE-2021-28843 | High | 7.5 | 2021-08-10 | Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03 by sending t… |
CVE-2021-28842 | High | 7.5 | 2021-08-10 | Null Pointer Deference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could l… |
CVE-2021-28841 | High | 7.5 | 2021-08-10 | Null Pointer Dereference vulnerability in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could let a… |
CVE-2021-28840 | High | 7.5 | 2021-08-10 | Null Pointer Dereference vulnerability exists in D-Link DAP-2310 2.07.RC031, DAP-2330 1.07.RC028, DAP-2360 2.07.RC043, DAP-2553 3.06.RC027, DAP-2660 1.13.RC074… |
CVE-2021-28839 | High | 7.5 | 2021-08-10 | Null Pointer Dereference vulnerability exists in D-Link DAP-2310 2.07.RC031, DAP-2330 1.07.RC028, DAP-2360 2.07.RC043, DAP-2553 3.06.RC027, DAP-2660 1.13.RC074… |
CVE-2021-28838 | High | 7.5 | 2021-08-10 | Null pointer dereference vulnerability in D-Link DAP-2310 2,10RC039, DAP-2330 1.10RC036 BETA, DAP-2360 2.10RC055, DAP-2553 3.10rc039 BETA, DAP-2660 1.15rc131b… |
CVE-2021-33717 | Medium | 5.5 | 2021-08-10 | A vulnerability has been identified in JT2Go (All versions < V13.2.0.1), Teamcenter Visualization (All versions < V13.2.0.1). When parsing specially crafted CG… |
CVE-2021-37615 | Medium | 4.7 | 2021-08-09 | Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A null pointer dereference was found… |
CVE-2021-37616 | Medium | 5.5 | 2021-08-09 | Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A null pointer dereference was found… |
CVE-2021-38208 | Medium | 5.5 | 2021-08-08 | net/nfc/llcp_sock.c in the Linux kernel before 5.12.10 allows local unprivileged users to cause a denial of service (NULL pointer dereference and BUG) by makin… |