CWE-476 · NULL Pointer Dereference (page 47)
Page 47 of 56 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-9214 | High | 7.5 | 2019-02-28 | In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the RPCAP dissector could crash. This was addressed in epan/dissectors/packet-rpcap.c by avoiding an attempted… |
CVE-2019-9208 | High | 7.5 | 2019-02-28 | In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash. This was addressed in epan/dissectors/asn1/tcap/tcap.cnf by avoiding NULL poin… |
CVE-2019-5668 | High | 7.8 | 2019-02-27 | NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiSubmitCommandVirtual in which the applica… |
CVE-2019-5667 | High | 7.8 | 2019-02-27 | NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiSetRootPageTable in which the application… |
CVE-2019-9199 | High | 8.8 | 2019-02-26 | PoDoFo::Impose::PdfTranslator::setSource() in pdftranslator.cpp in PoDoFo 0.9.6 has a NULL pointer dereference that can (for example) be triggered by sending a… |
CVE-2019-9113 | High | 8.8 | 2019-02-25 | Ming (aka libming) 0.4.8 has a NULL pointer dereference in the function getString() in the decompile.c file in libutil.a. |
CVE-2018-20786 | High | 7.5 | 2019-02-24 | libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (application crash)… |
CVE-2019-9031 | High | 7.5 | 2019-02-23 | An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a NULL pointer dereference in the function Mat_VarFree() in mat.c. |
CVE-2019-8413 | Medium | 5.5 | 2019-02-17 | On Xiaomi MIX 2 devices with the 4.4.78 kernel, a NULL pointer dereference in the ioctl interface of the device file /dev/elliptic1 or /dev/elliptic0 causes a… |
CVE-2019-8382 | High | 8.8 | 2019-02-17 | An issue was discovered in Bento4 1.5.1-628. A NULL pointer dereference occurs in the function AP4_List:Find located in Core/Ap4List.h when called from Core/Ap… |
CVE-2019-8380 | High | 8.8 | 2019-02-17 | An issue was discovered in Bento4 1.5.1-628. A NULL pointer dereference occurs in AP4_Track::GetSampleIndexForTimeStampMs() located in Core/Ap4Track.cpp. It ca… |
CVE-2019-8379 | High | 7.8 | 2019-02-17 | An issue was discovered in AdvanceCOMP through 2.1. A NULL pointer dereference exists in the function be_uint32_read() located in endianrw.h. It can be trigger… |
CVE-2019-8377 | High | 7.8 | 2019-02-17 | An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_ipv6_l4proto() located at get.c. This can be triggered by s… |
CVE-2019-8376 | High | 7.8 | 2019-02-17 | An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_layer4_v6() located at get.c. This can be triggered by send… |
CVE-2019-8357 | Medium | 5.5 | 2019-02-15 | An issue was discovered in SoX 14.4.2. lsx_make_lpf in effect_i_dsp.c allows a NULL pointer dereference. |
CVE-2019-5914 | Medium | 5.3 | 2019-02-13 | V20 PRO L-01J software version L01J20c and L01J20d has a NULL pointer exception flaw that can be used by an attacker to cause the device to crash on the same n… |
CVE-2018-12014 | High | 7.8 | 2019-02-11 | In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Null pointer dereference vulnerability may occur due… |
CVE-2019-7702 | Medium | 6.5 | 2019-02-10 | A NULL pointer dereference was discovered in wasm::SExpressionWasmBuilder::parseExpression in wasm-s-parser.cpp in Binaryen 1.38.22. A crafted wasm input can c… |
CVE-2018-9190 | Medium | 5.5 | 2019-02-08 | A null pointer dereference vulnerability in Fortinet FortiClientWindows 6.0.2 and earlier allows attacker to cause a denial of service via the NDIS miniport dr… |
CVE-2018-19029 | High | 7.8 | 2019-02-05 | LCDS Laquis SCADA prior to version 4.1.0.4150 allows an attacker using a specially crafted project file to supply a pointer for a controlled memory address, wh… |
CVE-2018-20751 | High | 8.8 | 2019-02-04 | An issue was discovered in crop_page in PoDoFo 0.9.6. For a crafted PDF document, pPage->GetObject()->GetDictionary().AddKey(PdfName("MediaBox"),var) can be pr… |
CVE-2019-7233 | High | 8.8 | 2019-01-30 | In libdoc through 2019-01-28, doc2text in catdoc.c has a NULL pointer dereference. |
CVE-2019-7153 | Medium | 6.5 | 2019-01-29 | A NULL pointer dereference was discovered in wasm::WasmBinaryBuilder::processFunctions() in wasm/wasm-binary.cpp (when calling wasm::WasmBinaryBuilder::getFunc… |
CVE-2019-7151 | Medium | 6.5 | 2019-01-29 | A NULL pointer dereference was discovered in wasm::Module::getFunctionOrNull in wasm/wasm.cpp in Binaryen 1.38.22. A crafted input can cause segmentation fault… |
CVE-2018-19720 | High | 8.8 | 2019-01-18 | Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017… |
CVE-2018-16004 | High | 7.8 | 2019-01-18 | Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017… |
CVE-2017-3135 | High | 7.5 | 2019-01-16 | Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIS… |
CVE-2019-6460 | Medium | 6.5 | 2019-01-16 | An issue was discovered in GNU Recutils 1.8. There is a NULL pointer dereference in the function rec_field_set_name() in the file rec-field.c in librec.a. |
CVE-2019-6456 | Medium | 6.5 | 2019-01-16 | An issue was discovered in GNU Recutils 1.8. There is a NULL pointer dereference in the function rec_fex_size() in the file rec-fex.c of librec.a. |
CVE-2019-6445 | Medium | 6.5 | 2019-01-16 | An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can cause a NULL pointer dereference and ntpd crash in ntp_control.c, related to ctl_… |
CVE-2019-6137 | High | 7.5 | 2019-01-11 | An issue was discovered in lib60870 2.1.1. LinkLayer_setAddress in link_layer/link_layer.c has a NULL pointer dereference. |
CVE-2019-5007 | High | 7.1 | 2019-01-03 | An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. It is an Out-of-Bounds Read Information Disclosure and crash due to a NULL pointe… |
CVE-2019-5006 | Medium | 5.5 | 2019-01-03 | An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. It is a NULL pointer dereference during PDF parsing. |
CVE-2018-20651 | Medium | 5.5 | 2019-01-01 | A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed… |
CVE-2018-6343 | High | 7.5 | 2018-12-31 | Proxygen fails to validate that a secondary auth manager is set before dereferencing it. That can cause a denial of service issue when parsing a Certificate/Ce… |
CVE-2018-20537 | Medium | 6.5 | 2018-12-28 | There is a NULL pointer dereference at liblas::SpatialReference::GetGTIF() (spatialreference.cpp) in libLAS 1.8.1 that will cause a denial of service. |
CVE-2018-20533 | Medium | 6.5 | 2018-12-28 | There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of… |
CVE-2018-20532 | Medium | 6.5 | 2018-12-28 | There is a NULL pointer dereference at ext/testcase.c (function testcase_read) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service. |
CVE-2018-19870 | High | 8.8 | 2018-12-26 | An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault. |
CVE-2018-20481 | Medium | 6.5 | 2018-12-26 | XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows remote attackers to cause a denial of service (NULL pointer deref… |
CVE-2018-20431 | Medium | 6.5 | 2018-12-24 | GNU Libextractor through 1.8 has a NULL Pointer Dereference vulnerability in the function process_metadata() in plugins/ole2_extractor.c. |
CVE-2018-20429 | High | 8.8 | 2018-12-24 | libming 0.4.8 has a NULL pointer dereference in the getName function of the decompile.c file, a different vulnerability than CVE-2018-7872 and CVE-2018-9165. |
CVE-2018-20428 | High | 8.8 | 2018-12-24 | libming 0.4.8 has a NULL pointer dereference in the strlenext function of the decompile.c file, a different vulnerability than CVE-2018-7874. |
CVE-2018-20427 | High | 8.8 | 2018-12-24 | libming 0.4.8 has a NULL pointer dereference in the getInt function of the decompile.c file, a different vulnerability than CVE-2018-9132. |
CVE-2018-20426 | High | 8.8 | 2018-12-24 | libming 0.4.8 has a NULL pointer dereference in the newVar3 function of the decompile.c file, a different vulnerability than CVE-2018-7866. |
CVE-2018-20425 | High | 8.8 | 2018-12-24 | libming 0.4.8 has a NULL pointer dereference in the pushdup function of the decompile.c file. |
CVE-2018-20364 | Medium | 6.5 | 2018-12-22 | LibRaw::copy_bayer in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference. |
CVE-2018-20363 | Medium | 6.5 | 2018-12-22 | LibRaw::raw2image in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference. |
CVE-2018-20362 | Medium | 5.5 | 2018-12-22 | A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a… |
CVE-2018-20357 | Medium | 5.5 | 2018-12-22 | A NULL pointer dereference was discovered in sbr_process_channel of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability cau… |
CVE-2018-20349 | Medium | 6.5 | 2018-12-22 | The igraph_i_strdiff function in igraph_trie.c in igraph through 0.7.1 has an NULL pointer dereference that allows attackers to cause a denial of service (appl… |
CVE-2018-20191 | High | 7.5 | 2018-12-20 | hw/rdma/vmw/pvrdma_main.c in QEMU does not implement a read operation (such as uar_read by analogy to uar_write), which allows attackers to cause a denial of s… |
CVE-2018-20125 | High | 7.5 | 2018-12-20 | hw/rdma/vmw/pvrdma_cmd.c in QEMU allows attackers to cause a denial of service (NULL pointer dereference or excessive memory allocation) in create_cq_ring or c… |
CVE-2018-1000879 | Medium | 6.5 | 2018-12-20 | libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards (release v3.3.0 onwards) contains a CWE-476: NULL Pointer Dereference vulnerability… |
CVE-2018-20024 | High | 7.5 | 2018-12-19 | LibVNC before commit 4a21bbd097ef7c44bb000c3bd0907f96a10e4ce7 contains null pointer dereference in VNC client code that can result DoS. |
CVE-2018-20199 | Medium | 5.5 | 2018-12-18 | A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a… |
CVE-2018-20198 | Medium | 5.5 | 2018-12-18 | A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a… |
CVE-2018-20195 | Medium | 5.5 | 2018-12-18 | A NULL pointer dereference was discovered in ic_predict of libfaad/ic_predict.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a… |
CVE-2018-20190 | Medium | 6.5 | 2018-12-17 | In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Eval::operator()(Sass::Supports_Operator*) in eval.cpp may cause a Denial of Service (applic… |
CVE-2018-14853 | Medium | 4.3 | 2018-12-17 | A NULL pointer dereference in dhd_prot_txdata_write_flush in drivers/net/wireless/bcmdhd4358/dhd_msgbuf.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy… |
CVE-2018-5812 | Medium | 6.5 | 2018-12-07 | An error within the "nikon_coolscan_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to trigger a NULL poin… |
CVE-2018-5806 | Medium | 6.5 | 2018-12-07 | An error within the "leaf_hdr_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.8 can be exploited to trigger a NULL pointer de… |
CVE-2018-5801 | Medium | 6.5 | 2018-12-07 | An error within the "LibRaw::unpack()" function (src/libraw_cxx.cpp) in LibRaw versions prior to 0.18.7 can be exploited to trigger a NULL pointer dereference. |
CVE-2018-19939 | High | 7.5 | 2018-12-07 | The Goodix GT9xx touchscreen driver for custom Linux kernels on Xiaomi daisy-o-oss and daisy-p-oss as used in Mi A2 Lite and RedMi6 pro devices through 2018-08… |
CVE-2018-19935 | High | 7.5 | 2018-12-07 | ext/imap/php_imap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a… |
CVE-2018-19882 | Medium | 5.5 | 2018-12-06 | In Artifex MuPDF 1.14.0, the svg_run_image function in svg/svg-run.c allows remote attackers to cause a denial of service (href_att NULL pointer dereference an… |
CVE-2018-6116 | Medium | 6.5 | 2018-12-04 | A nullptr dereference in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially perform out of bounds memory access via a… |
CVE-2018-19797 | Medium | 6.5 | 2018-12-03 | In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Selector_List::populate_extends in SharedPtr.hpp (used by ast.cpp and ast_selectors.cpp) may… |
CVE-2018-19757 | Medium | 6.5 | 2018-11-30 | There is a NULL pointer dereference at function sixel_helper_set_additional_message (status.c) in libsixel 1.8.2 that will cause a denial of service. |
CVE-2018-19624 | Medium | 5.5 | 2018-11-29 | In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the PVFS dissector could crash. This was addressed in epan/dissectors/packet-pvfs2.c by preventing a NULL poin… |
CVE-2018-14747 | High | 7.5 | 2018-11-28 | NULL Pointer Dereference vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier ve… |
CVE-2018-16852 | Medium | 6.5 | 2018-11-28 | Samba from version 4.9.0 and before version 4.9.3 is vulnerable to a NULL pointer de-reference. During the processing of an DNS zone in the DNS management DCE/… |
CVE-2018-16851 | Medium | 6.5 | 2018-11-28 | Samba from version 4.0.0 and before versions 4.7.12, 4.8.7, 4.9.3 is vulnerable to a denial of service. During the processing of an LDAP search before Samba's… |
CVE-2018-19607 | Medium | 6.5 | 2018-11-27 | Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via… |
CVE-2018-14646 | Medium | 5.5 | 2018-11-26 | The Linux kernel before 4.15-rc8 was found to be vulnerable to a NULL pointer dereference bug in the __netlink_ns_capable() function in the net/netlink/af_netl… |
CVE-2018-19542 | Medium | 6.5 | 2018-11-26 | An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function jp2_decode in libjasper/jp2/jp2_dec.c, leading to a denial of ser… |
CVE-2018-19532 | High | 8.8 | 2018-11-26 | A NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget() in pdftranslator.cpp of PoDoFo 0.9.6, while creating the PdfXObject… |
CVE-2018-19504 | High | 7.8 | 2018-11-23 | An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1. There is a NULL pointer dereference in ifilter_bank() in libfaad/filtbank.c. |
CVE-2018-19432 | Medium | 6.5 | 2018-11-22 | An issue was discovered in libsndfile 1.0.28. There is a NULL pointer dereference in the function sf_write_int in sndfile.c, which will lead to a denial of ser… |
CVE-2018-19407 | Medium | 5.5 | 2018-11-21 | The vcpu_scan_ioapic function in arch/x86/kvm/x86.c in the Linux kernel through 4.19.2 allows local users to cause a denial of service (NULL pointer dereferenc… |
CVE-2018-19406 | Medium | 5.5 | 2018-11-21 | kvm_pv_send_ipi in arch/x86/kvm/lapic.c in the Linux kernel through 4.19.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) v… |
CVE-2018-19395 | High | 7.5 | 2018-11-20 | ext/standard/var.c in PHP 5.x through 7.1.24 on Windows allows attackers to cause a denial of service (NULL pointer dereference and application crash) because… |
CVE-2018-7361 | Medium | 6.5 | 2018-11-16 | All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by null pointer dereference vulnerability, which may allows an attacker to cause a denial… |
CVE-2018-19217 | Medium | 6.5 | 2018-11-12 | In ncurses, possibly a 6.x version, there is a NULL pointer dereference at the function _nc_name_match that will lead to a denial of service attack. NOTE: the… |
CVE-2018-19211 | Medium | 5.5 | 2018-11-12 | In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will lead to a denial of service attack. The product proc… |
CVE-2018-19210 | Medium | 6.5 | 2018-11-12 | In LibTIFF 4.0.9, there is a NULL pointer dereference in the TIFFWriteDirectorySec function in tif_dirwrite.c that will lead to a denial of service attack, as… |
CVE-2018-19209 | Medium | 5.5 | 2018-11-12 | Netwide Assembler (NASM) 2.14rc15 has a NULL pointer dereference in the function find_label in asm/labels.c that will lead to a DoS attack. |
CVE-2018-19208 | Medium | 6.5 | 2018-11-12 | In libwpd 0.10.2, there is a NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp that will lead to a denial of s… |
CVE-2018-19200 | High | 7.5 | 2018-11-12 | An issue was discovered in uriparser before 0.9.0. UriCommon.c allows attempted operations on NULL input via a uriResetUri* function. |
CVE-2018-19184 | High | 7.5 | 2018-11-12 | cmd/evm/runner.go in Go Ethereum (aka geth) 1.8.17 allows attackers to cause a denial of service (SEGV) via crafted bytecode. |
CVE-2018-19149 | Medium | 6.5 | 2018-11-10 | Poppler before 0.70.0 has a NULL pointer dereference in _poppler_attachment_new when called from poppler_annot_file_attachment_get_attachment. |
CVE-2018-19129 | Medium | 6.5 | 2018-11-09 | In Libav 12.3, a NULL pointer dereference (RIP points to zero) issue in ff_mpa_synth_filter_float in libavcodec/mpegaudiodsp_template.c can cause a segmentatio… |
CVE-2018-19122 | Medium | 4.3 | 2018-11-09 | An issue has been found in libIEC61850 v1.3. It is a NULL pointer dereference in Ethernet_sendPacket in ethernet_bsd.c. |
CVE-2018-19121 | Medium | 4.3 | 2018-11-09 | An issue has been found in libIEC61850 v1.3. It is a SEGV in Ethernet_receivePacket in ethernet_bsd.c. |
CVE-2018-19060 | Medium | 6.5 | 2018-11-07 | An issue was discovered in Poppler 0.71.0. There is a NULL pointer dereference in goo/GooString.h, will lead to denial of service, as demonstrated by utils/pdf… |
CVE-2018-18937 | High | 7.5 | 2018-11-05 | An issue has been found in libIEC61850 v1.3. It is a NULL pointer dereference in ClientDataSet_getValues in client/ied_connection.c. |
CVE-2018-18883 | High | 8.8 | 2018-11-01 | An issue was discovered in Xen 4.9.x through 4.11.x, on Intel x86 platforms, allowing x86 HVM and PVH guests to cause a host OS denial of service (NULL pointer… |
CVE-2018-18873 | Medium | 5.5 | 2018-10-31 | An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function ras_putdatastd in ras/ras_enc.c. |
CVE-2018-18829 | Medium | 6.5 | 2018-10-30 | There exists a NULL pointer dereference in ff_vc1_parse_frame_header_adv in vc1.c in Libav 12.3, which allows attackers to cause a denial-of-service through a… |
CVE-2018-18661 | Medium | 6.5 | 2018-10-26 | An issue was discovered in LibTIFF 4.0.9. There is a NULL pointer dereference in the function LZWDecode in the file tif_lzw.c. |