NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

CVEs (5,437)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-31826 1Shibboleth 1Service Provider Jun 17, 2026 Apr 27, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Shibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointer dereference flaw involving the session recovery feature. The flaw is exploitable (for a daemon crash) on systems not using this feature if a crafted...Show more Shibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointer dereference flaw involving the session recovery feature. The flaw is exploitable (for a daemon crash) on systems not using this feature if a crafted cookie is supplied.Show less
CVE-2021-0251 1Juniper 1Junos Jun 17, 2026 Apr 22, 2021 N/A· v4 8.6 HIGH· v3 5.0 MEDIUM· v2 A NULL Pointer Dereference vulnerability in the Captive Portal Content Delivery (CPCD) services daemon (cpcd) of Juniper Networks Junos OS on MX Series with MS-PIC, MS-SPC3, MS-MIC or MS-MPC allows an attacker to send ma...Show more A NULL Pointer Dereference vulnerability in the Captive Portal Content Delivery (CPCD) services daemon (cpcd) of Juniper Networks Junos OS on MX Series with MS-PIC, MS-SPC3, MS-MIC or MS-MPC allows an attacker to send malformed HTTP packets to the device thereby causing a Denial of Service (DoS), crashing the Multiservices PIC Management Daemon (mspmand) process thereby denying users the ability to login, while concurrently impacting other mspmand services and traffic through the device. Continued receipt and processing of these malformed packets will create a sustained Denial of Service (DoS) condition. While the Services PIC is restarting, all PIC services will be bypassed until the Services PIC completes its boot process. An attacker sending these malformed HTTP packets to the device who is not part of the Captive Portal experience is not able to exploit this issue. This issue is not applicable to MX RE-based CPCD platforms. This issue affects: Juniper Networks Junos OS on MX Series 17.3 version 17.3R1 and later versions prior to 17.4 versions 17.4R2-S9, 17.4R3-S2; 18.1 versions prior to 18.1R3-S9; 18.2 versions prior to 18.2R3-S3; 18.3 versions prior to 18.3R3-S1; 18.4 versions prior to 18.4R3; 19.1 versions prior to 19.1R2-S2, 19.1R3; 19.2 versions prior to 19.2R2; 19.3 versions prior to 19.3R3. This issue does not affect: Juniper Networks Junos OS versions prior to 17.3R1.Show less
CVE-2021-1078 1Nvidia 1Gpu Display Driver Jun 17, 2026 Apr 21, 2021 N/A· v4 5.5 MEDIUM· v3 4.9 MEDIUM· v2 NVIDIA Windows GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel driver (nvlddmkm.sys) where a NULL pointer dereference may lead to system crash.
CVE-2021-1075 1Nvidia 1Gpu Display Driver Jun 17, 2026 Apr 21, 2021 N/A· v4 7.3 HIGH· v3 5.6 MEDIUM· v2 NVIDIA Windows GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the program dereferences a pointer that contains a location fo...Show more NVIDIA Windows GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the program dereferences a pointer that contains a location for memory that is no longer valid, which may lead to code execution, denial of service, or escalation of privileges. Attacker does not have any control over the information and may conduct limited data modification.Show less
CVE-2020-23932 1Gpac 1Gpac Jun 17, 2026 Apr 21, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in gpac before 1.0.1. A NULL pointer dereference exists in the function dump_isom_sdp located in filedump.c. It allows an attacker to cause Denial of Service.
CVE-2020-23930 1Gpac 1Gpac Jun 17, 2026 Apr 21, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in gpac through 20200801. A NULL pointer dereference exists in the function nhmldump_send_header located in write_nhml.c. It allows an attacker to cause Denial of Service.
CVE-2020-23914 1Cpp Peglib Project 1Cpp Peglib Jun 17, 2026 Apr 21, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in cpp-peglib through v0.1.12. A NULL pointer dereference exists in the peg::AstOptimizer::optimize() located in peglib.h. It allows an attacker to cause Denial of Service.
CVE-2020-23912 1Axiosys 1Bento4 Jun 17, 2026 Apr 21, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in Bento4 through v1.6.0-637. A NULL pointer dereference exists in the function AP4_StszAtom::GetSampleSize() located in Ap4StszAtom.cpp. It allows an attacker to cause Denial of Service.
CVE-2020-35982 1Gpac 1Gpac Jun 17, 2026 Apr 21, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference in the function gf_hinter_track_finalize() in media_tools/isom_hinter.c.
CVE-2020-35981 1Gpac 1Gpac Jun 17, 2026 Apr 21, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference in the function SetupWriters() in isomedia/isom_store.c.
CVE-2021-30199 1Gpac 1Gpac Jun 17, 2026 Apr 19, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 In filters/reframe_latm.c in GPAC 1.0.1 there is a Null Pointer Dereference, when gf_filter_pck_get_data is called. The first arg pck may be null with a crafted mp4 file,which results in a crash.
CVE-2021-30015 1Gpac 1Gpac Jun 17, 2026 Apr 19, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 There is a Null Pointer Dereference in function filter_core/filter_pck.c:gf_filter_pck_new_alloc_internal in GPAC 1.0.1. The pid comes from function av1dmx_parse_flush_sample, the ctx.opid maybe NULL. The result is a cra...Show more There is a Null Pointer Dereference in function filter_core/filter_pck.c:gf_filter_pck_new_alloc_internal in GPAC 1.0.1. The pid comes from function av1dmx_parse_flush_sample, the ctx.opid maybe NULL. The result is a crash in gf_filter_pck_new_alloc_internal.Show less
CVE-2021-31262 1Gpac 1Gpac Jun 17, 2026 Apr 19, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The AV1_DuplicateConfig function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
CVE-2021-31260 1Gpac 1Gpac Jun 17, 2026 Apr 19, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The MergeTrack function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
CVE-2021-31259 1Gpac 1Gpac Jun 17, 2026 Apr 19, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The gf_isom_cenc_get_default_info_internal function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
CVE-2021-31258 1Gpac 1Gpac Jun 17, 2026 Apr 19, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The gf_isom_set_extraction_slc function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
CVE-2021-31257 1Gpac 1Gpac Jun 17, 2026 Apr 19, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The HintFile function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
CVE-2021-27029 1Autodesk 1Fbx Review Jun 17, 2026 Apr 19, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The user may be tricked into opening a malicious FBX file which may exploit a Null Pointer Dereference vulnerability in FBX's Review version 1.5.0 and prior causing the application to crash leading to a denial of service...Show more The user may be tricked into opening a malicious FBX file which may exploit a Null Pointer Dereference vulnerability in FBX's Review version 1.5.0 and prior causing the application to crash leading to a denial of service.Show less
CVE-2021-28855 1Entropymine 1Deark Jun 17, 2026 Apr 14, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 In Deark before 1.5.8, a specially crafted input file can cause a NULL pointer dereference in the dbuf_write function (src/deark-dbuf.c).
CVE-2021-28300 1Gpac 1Gpac Jun 17, 2026 Apr 14, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack()" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service (DoS) by uploading a malicious MP4 file.

Previous 1...202203204...272 Next