CWE-476 · NULL Pointer Dereference (page 47)
Page 47 of 57 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-18976 | High | 7.5 | 2019-11-22 | An issue was discovered in res_pjsip_t38.c in Sangoma Asterisk through 13.x and Certified Asterisk through 13.21-x. If it receives a re-invite initiating T.38… |
CVE-2019-19227 | Medium | 5.5 | 2019-11-22 | In the AppleTalk subsystem in the Linux kernel before 5.1, there is a potential NULL pointer dereference because register_snap_client may return NULL. This wil… |
CVE-2019-19037 | Medium | 5.5 | 2019-11-21 | ext4_empty_dir in fs/ext4/namei.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because ext4_read_dirblock(inode,0,DIRENT_HTREE) can be… |
CVE-2019-19036 | Medium | 5.5 | 2019-11-21 | btrfs_root_node in fs/btrfs/ctree.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because rcu_dereference(root->node) can be zero. |
CVE-2019-19011 | High | 7.5 | 2019-11-17 | MiniUPnP ngiflib 0.4 has a NULL pointer dereference in GifIndexToTrueColor in ngiflib.c via a file that lacks a palette. |
CVE-2016-5285 | High | 7.5 | 2019-11-15 | A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMAC… |
CVE-2019-11111 | High | 7.8 | 2019-11-14 | Pointer corruption in the Unified Shader Compiler in Intel(R) Graphics Drivers before 10.18.14.5074 (aka 15.36.x.5074) may allow an authenticated user to poten… |
CVE-2019-18885 | Medium | 5.5 | 2019-11-14 | fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfs_verify_dev_extents NULL pointer dereference via a crafted btrfs image because fs_devices->devi… |
CVE-2017-17224 | High | 8.8 | 2019-11-12 | Some Huawei smart phones with versions earlier than Harry-AL00C 9.1.0.206(C00E205R3P1) have a null pointer dereference vulnerability. An attacker crafts specif… |
CVE-2011-1802 | Medium | 6.5 | 2019-11-12 | WebKit in Google Chrome before Blink M11 and M12 does not properly handle counter nodes, which allows remote attackers to cause a denial of service (memory cor… |
CVE-2010-2488 | High | 7.5 | 2019-11-12 | NULL pointer dereference vulnerability in ZNC before 0.092 caused by traffic stats when there are unauthenticated connections. |
CVE-2019-5691 | High | 7.8 | 2019-11-09 | NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which a NULL poi… |
CVE-2019-18804 | High | 7.5 | 2019-11-07 | DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp. |
CVE-2019-10534 | Critical | 9.8 | 2019-11-06 | Null-pointer dereference can occur while accessing the super index entry when it is not been allocated in Snapdragon Auto, Snapdragon Compute, Snapdragon Consu… |
CVE-2019-10488 | High | 7.5 | 2019-11-06 | Null pointer dereference can occur while parsing invalid chunks while playing the nonstandard clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer… |
CVE-2019-18799 | Medium | 6.5 | 2019-11-06 | LibSass before 3.6.3 allows a NULL pointer dereference in Sass::Parser::parseCompoundSelector in parser_selectors.cpp. |
CVE-2019-14847 | Medium | 4.9 | 2019-11-06 | A flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x before 4.10.10. An attacker can crash AD DC LDAP server via dirsync resulting in denial of… |
CVE-2010-2222 | High | 7.5 | 2019-11-05 | The _ger_parse_control function in Red Hat Directory Server 8 and the 389 Directory Server allows attackers to cause a denial of service (NULL pointer derefere… |
CVE-2019-18680 | High | 7.5 | 2019-11-04 | An issue was discovered in the Linux kernel 4.4.x before 4.4.195. There is a NULL pointer dereference in rds_tcp_kill_sock() in net/rds/tcp.c that will cause d… |
CVE-2013-4412 | High | 7.5 | 2019-11-04 | slim has NULL pointer dereference when using crypt() method from glibc 2.17 |
CVE-2019-5010 | High | 7.5 | 2019-10-31 | An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6. A specially crafted X509 certificate… |
CVE-2019-18635 | High | 7.5 | 2019-10-30 | An issue was discovered in Mooltipass Moolticute through v0.42.1 and v0.42.x-testing through v0.42.5-testing. There is a NULL pointer dereference in MPDevice_w… |
CVE-2010-0206 | Medium | 5.5 | 2019-10-30 | xpdf allows remote attackers to cause a denial of service (NULL pointer dereference and crash) in the way it processes JBIG2 PDF stream objects. |
CVE-2019-15680 | High | 7.5 | 2019-10-29 | TightVNC code version 1.3.10 contains null pointer dereference in HandleZlibBPP function, which results Denial of System (DoS). This attack appear to be exploi… |
CVE-2019-15258 | Medium | 6.5 | 2019-10-16 | A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to… |
CVE-2019-17539 | Critical | 9.8 | 2019-10-14 | In FFmpeg before 4.2, avcodec_open2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close… |
CVE-2019-17502 | High | 7.5 | 2019-10-12 | Hydra through 0.1.8 has a NULL pointer dereference and daemon crash when processing POST requests that lack a Content-Length header. read.c, request.c, and uti… |
CVE-2019-17454 | Medium | 6.5 | 2019-10-10 | Bento4 1.5.1.0 has a NULL pointer dereference in AP4_Descriptor::GetTag in Core/Ap4Descriptor.h, related to AP4_StsdAtom::GetSampleDescription in Core/Ap4StsdA… |
CVE-2019-17453 | Medium | 6.5 | 2019-10-10 | Bento4 1.5.1.0 has a NULL pointer dereference in AP4_DescriptorListWriter::Action in Core/Ap4Descriptor.h, related to AP4_IodsAtom::WriteFields in Core/Ap4Iods… |
CVE-2019-17452 | Medium | 6.5 | 2019-10-10 | Bento4 1.5.1.0 has a NULL pointer dereference in AP4_DescriptorListInspector::Action in Core/Ap4Descriptor.h, related to AP4_IodsAtom::InspectFields in Core/Ap… |
CVE-2019-15163 | High | 7.5 | 2019-10-03 | rpcapd/daemon.c in libpcap before 1.9.1 allows attackers to cause a denial of service (NULL pointer dereference and daemon crash) if a crypt() call fails. |
CVE-2019-17064 | Medium | 5.5 | 2019-10-01 | Catalog.cc in Xpdf 4.02 has a NULL pointer dereference because Catalog.pageLabels is initialized too late in the Catalog constructor. |
CVE-2019-10510 | High | 8.2 | 2019-09-30 | BT process died and BT toggled due to null pointer dereference when invalid vendor pass through command sent from remote in Snapdragon Auto, Snapdragon Consume… |
CVE-2019-10489 | High | 7.5 | 2019-09-30 | Possible null-pointer dereference can occur while parsing avi clip during copy in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Indu… |
CVE-2019-9430 | High | 7.5 | 2019-09-27 | In Bluetooth, there is a possible null pointer dereference due to a missing null check. This could lead to remote denial of service with no additional executio… |
CVE-2019-9400 | High | 7.5 | 2019-09-27 | In Bluetooth, there is a possible null pointer dereference due to a missing null check. This could lead to remote denial of service with no additional executio… |
CVE-2019-9372 | Medium | 6.5 | 2019-09-27 | In libskia, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed… |
CVE-2019-9279 | High | 7.5 | 2019-09-27 | In the wifi hotspot service, there is a possible denial of service due to a null pointer dereference. This could lead to remote denial of service with no addit… |
CVE-2019-10097 | High | 7.2 | 2019-09-26 | In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafte… |
CVE-2019-0203 | High | 7.5 | 2019-09-26 | In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a client sends certain sequences o… |
CVE-2019-12654 | High | 7.5 | 2019-09-25 | A vulnerability in the common Session Initiation Protocol (SIP) library of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to tri… |
CVE-2019-12647 | High | 7.5 | 2019-09-25 | A vulnerability in the Ident protocol handler of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to r… |
CVE-2019-16754 | High | 7.5 | 2019-09-24 | RIOT 2019.07 contains a NULL pointer dereference in the MQTT-SN implementation (asymcute), potentially allowing an attacker to crash a network node running RIO… |
CVE-2019-13542 | Medium | 6.5 | 2019-09-17 | 3S-Smart Software Solutions GmbH CODESYS V3 OPC UA Server, all versions 3.5.11.0 to 3.5.15.0, allows an attacker to send crafted requests from a trusted OPC UA… |
CVE-2019-16351 | Medium | 6.5 | 2019-09-16 | ffjpeg before 2019-08-18 has a NULL pointer dereference in huffman_decode_step() at huffman.c. |
CVE-2019-16350 | Medium | 6.5 | 2019-09-16 | ffjpeg before 2019-08-18 has a NULL pointer dereference in idct2d8x8() at dct.c. |
CVE-2019-16349 | Medium | 5.5 | 2019-09-16 | Bento4 1.5.1-628 has a NULL pointer dereference in AP4_ByteStream::ReadUI32 in Core/Ap4ByteStream.cpp when called from the AP4_TrunAtom class. |
CVE-2019-16348 | Medium | 6.5 | 2019-09-16 | marc-q libwav through 2017-04-20 has a NULL pointer dereference in gain_file() at wav_gain.c. |
CVE-2018-21015 | Medium | 6.5 | 2019-09-16 | AVC_DuplicateConfig() at isomedia/avc_ext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash)… |
CVE-2019-5055 | High | 7.5 | 2019-09-11 | An exploitable denial-of-service vulnerability exists in the Host Access Point Daemon (hostapd) on the NETGEAR N300 (WNR2000v5 with Firmware Version V1.0.0.70)… |
CVE-2019-5054 | High | 7.5 | 2019-09-11 | An exploitable denial-of-service vulnerability exists in the session handling functionality of the NETGEAR N300 (WNR2000v5 with Firmware Version V1.0.0.70) HTT… |
CVE-2019-16234 | Medium | 4.7 | 2019-09-11 | drivers/net/wireless/intel/iwlwifi/pcie/trans.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereferen… |
CVE-2019-16233 | Medium | 4.1 | 2019-09-11 | drivers/scsi/qla2xxx/qla_os.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. |
CVE-2019-16232 | Medium | 4.1 | 2019-09-11 | drivers/net/wireless/marvell/libertas/if_sdio.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereferen… |
CVE-2019-16231 | Medium | 4.1 | 2019-09-11 | drivers/net/fjes/fjes_main.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. |
CVE-2019-16230 | Medium | 4.7 | 2019-09-11 | drivers/gpu/drm/radeon/radeon_display.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. NOTE… |
CVE-2019-16229 | Medium | 4.1 | 2019-09-11 | drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. N… |
CVE-2019-15297 | Medium | 6.5 | 2019-09-09 | res_pjsip_t38 in Sangoma Asterisk 15.x before 15.7.4 and 16.x before 16.5.1 allows an attacker to trigger a crash by sending a declined stream in a response to… |
CVE-2019-16164 | Medium | 6.5 | 2019-09-09 | MyHTML through 4.0.5 has a NULL pointer dereference in myhtml_tree_node_remove in tree.c. |
CVE-2019-16161 | High | 7.5 | 2019-09-09 | Onigmo through 6.2.0 has a NULL pointer dereference in onig_error_code_to_str because of fetch_token in regparse.c. |
CVE-2019-16092 | Critical | 9.8 | 2019-09-08 | Symonics libmysofa 0.7 has a NULL pointer dereference in getHrtf in hrtf/reader.c. |
CVE-2019-16089 | Medium | 4.1 | 2019-09-06 | An issue was discovered in the Linux kernel through 5.2.13. nbd_genl_status in drivers/block/nbd.c does not check the nla_nest_start_noflag return value. |
CVE-2019-15924 | Medium | 5.5 | 2019-09-04 | An issue was discovered in the Linux kernel before 5.0.11. fm10k_init_module in drivers/net/ethernet/intel/fm10k/fm10k_main.c has a NULL pointer dereference be… |
CVE-2019-15923 | Medium | 5.5 | 2019-09-04 | An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a cd data structure if alloc_disk fails in drivers/block/pari… |
CVE-2019-15922 | Medium | 5.5 | 2019-09-04 | An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a pf data structure if alloc_disk fails in drivers/block/pari… |
CVE-2019-15860 | Medium | 5.5 | 2019-09-03 | Xpdf 2.00 allows a SIGSEGV in XRef::constructXRef in XRef.cc. NOTE: 2.00 is a version from November 2002. |
CVE-2019-14534 | Medium | 5.5 | 2019-08-29 | In VideoLAN VLC media player 3.0.7.1, there is a NULL pointer dereference at the function SeekPercent of demux/asf/asf.c that will lead to a denial of service… |
CVE-2019-15759 | Medium | 6.5 | 2019-08-29 | An issue was discovered in Binaryen 1.38.32. Two visitors in ir/ExpressionManipulator.cpp can lead to a NULL pointer dereference in wasm::LocalSet::finalize in… |
CVE-2019-15757 | Medium | 6.5 | 2019-08-29 | libMirage 3.2.2 in CDemu has a NULL pointer dereference in the NRG parser in parser.c. |
CVE-2019-1900 | High | 7.5 | 2019-08-21 | A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to cause the web server proce… |
CVE-2019-15291 | Medium | 4.6 | 2019-08-20 | An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe functi… |
CVE-2019-15223 | Medium | 4.6 | 2019-08-19 | An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/driver.c… |
CVE-2019-15222 | Medium | 4.6 | 2019-08-19 | An issue was discovered in the Linux kernel before 5.2.8. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/helper.c (motu_… |
CVE-2019-15221 | Medium | 4.6 | 2019-08-19 | An issue was discovered in the Linux kernel before 5.1.17. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/pcm.c dr… |
CVE-2019-15219 | Medium | 4.6 | 2019-08-19 | An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/sisusbvg… |
CVE-2019-15218 | Medium | 4.6 | 2019-08-19 | An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/siano/s… |
CVE-2019-15217 | Medium | 4.6 | 2019-08-19 | An issue was discovered in the Linux kernel before 5.2.3. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/zr364xx… |
CVE-2019-15216 | Medium | 4.6 | 2019-08-19 | An issue was discovered in the Linux kernel before 5.0.14. There is a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/yurex.c… |
CVE-2019-15099 | High | 7.5 | 2019-08-16 | drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descriptor. |
CVE-2019-15098 | Medium | 4.6 | 2019-08-16 | drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor. |
CVE-2019-13219 | Medium | 5.5 | 2019-08-15 | A NULL pointer dereference in the get_window function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service by opening a crafted Ogg… |
CVE-2019-10140 | Medium | 5.5 | 2019-08-15 | A vulnerability was found in Linux kernel's, versions up to 3.10, implementation of overlayfs. An attacker with local access can create a denial of service sit… |
CVE-2019-12259 | High | 7.5 | 2019-08-09 | Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. There is an IPNET security vulnerability: DoS via NULL d… |
CVE-2019-14493 | High | 7.5 | 2019-08-01 | An issue was discovered in OpenCV before 4.1.1. There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp. |
CVE-2018-16871 | High | 7.5 | 2019-07-30 | A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mount an exported NFS… |
CVE-2019-14381 | High | 7.5 | 2019-07-30 | libopenmpt before 0.4.3 allows a crash due to a NULL pointer dereference when doing a portamento from an OPL instrument to an empty instrument note map slot. |
CVE-2019-2334 | High | 7.5 | 2019-07-25 | Null pointer dereferencing can happen when playing the clip with wrong block group id in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdrag… |
CVE-2019-2236 | Medium | 5.5 | 2019-07-25 | Null pointer dereference during secure application termination using specific application ids. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… |
CVE-2019-14248 | Medium | 5.5 | 2019-07-24 | In libnasm.a in Netwide Assembler (NASM) 2.14.xx, asm/pragma.c allows a NULL pointer dereference in process_pragma, search_pragma_list, and nasm_set_limit when… |
CVE-2019-1010171 | High | 7.5 | 2019-07-23 | Jsish 2.4.83 2.0483 is affected by: Nullpointer dereference. The impact is: denial of service. The component is: function jsi_DumpFunctions (jsiEval.c:567). Th… |
CVE-2019-1010162 | Medium | 5.5 | 2019-07-23 | jsish 2.4.74 2.0474 is affected by: CWE-476: NULL Pointer Dereference. The impact is: denial of service. The component is: function Jsi_StrcmpDict (jsiChar.c:1… |
CVE-2019-2264 | High | 7.8 | 2019-07-22 | Null pointer dereference occurs for channel context while opening glink channel in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voic… |
CVE-2019-14212 | High | 7.5 | 2019-07-21 | An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash when calling certain XFA JavaScript due to the use of, or access to, a N… |
CVE-2019-14208 | High | 7.5 | 2019-07-21 | An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to a NULL pointer dereference and crash when getting a PDF object f… |
CVE-2019-1010239 | High | 7.5 | 2019-07-19 | DaveGamble/cJSON cJSON 1.7.8 is affected by: Improper Check for Unusual or Exceptional Conditions. The impact is: Null dereference, so attack can cause denial… |
CVE-2019-13959 | Medium | 6.5 | 2019-07-18 | In Bento4 1.5.1-627, AP4_DataBuffer::SetDataSize does not handle reallocation failures, leading to a memory copy into a NULL pointer. This is different from CV… |
CVE-2019-12175 | High | 7.5 | 2019-07-17 | In Zeek Network Security Monitor (formerly known as Bro) before 2.6.2, a NULL pointer dereference in the Kerberos (aka KRB) protocol parser leads to DoS becaus… |
CVE-2019-13590 | Medium | 5.5 | 2019-07-14 | An issue was discovered in libsox.a in SoX 14.4.2. In sox-fmt.h (startread function), there is an integer overflow on the result of integer addition (wraparoun… |
CVE-2019-13161 | Medium | 5.3 | 2019-07-12 | An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0, and Certified Asterisk through 13.21-ce… |
CVE-2019-13225 | Medium | 6.5 | 2019-07-10 | A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular… |