NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

CVEs (5,437)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-19462 5Canonical DebianLinux+2 more 9Active Iq Unified Manager Debian LinuxHci Compute Node+6 more Jun 17, 2026 Nov 30, 2019 N/A· v4 5.5 MEDIUM· v3 4.9 MEDIUM· v2 relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering a NULL alloc_percpu result.
CVE-2019-19376 1Octopus 1Octopus Deploy Jun 17, 2026 Nov 28, 2019 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 In Octopus Deploy before 2019.10.6, an authenticated user with TeamEdit permission could send a malformed Team API request that bypasses input validation and causes an application level denial of service condition. (The...Show more In Octopus Deploy before 2019.10.6, an authenticated user with TeamEdit permission could send a malformed Team API request that bypasses input validation and causes an application level denial of service condition. (The fix for this was also backported to LTS 2019.9.8 and LTS 2019.6.14.)Show less
CVE-2019-19242 5Canonical OracleRedhat+2 more 5Enterprise Linux Mysql WorkbenchSinec Infrastructure Network Services+2 more Jun 17, 2026 Nov 27, 2019 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c.
CVE-2019-19308 1Gnome 1Gnome Font Viewer Jun 17, 2026 Nov 27, 2019 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 In text_to_glyphs in sushi-font-widget.c in gnome-font-viewer 3.34.0, there is a NULL pointer dereference while parsing a TTF font file that lacks a name section (due to a g_strconcat call that returns NULL).
CVE-2019-19272 1Proftpd 1Proftpd Jun 17, 2026 Nov 26, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. Direct dereference of a NULL pointer (a variable initialized to NULL) leads to a crash when validating the certificate of a client connecting to the serv...Show more An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. Direct dereference of a NULL pointer (a variable initialized to NULL) leads to a crash when validating the certificate of a client connecting to the server in a TLS client/server mutual-authentication setup.Show less
CVE-2012-5640 1Acme 1Thttpd Nov 21, 2024 Nov 25, 2019 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 thttpd has a local DoS vulnerability via specially-crafted .htpasswd files
CVE-2019-10207 1Linux 1Linux Kernel Jun 17, 2026 Nov 25, 2019 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 A flaw was found in the Linux kernel's Bluetooth implementation of UART, all versions kernel 3.x.x before 4.18.0 and kernel 5.x.x. An attacker with local access and write permissions to the Bluetooth hardware could use t...Show more A flaw was found in the Linux kernel's Bluetooth implementation of UART, all versions kernel 3.x.x before 4.18.0 and kernel 5.x.x. An attacker with local access and write permissions to the Bluetooth hardware could use this flaw to issue a specially crafted ioctl function call and cause the system to crash.Show less
CVE-2019-18976 2Debian Digium 3Asterisk Certified AsteriskDebian Linux Jun 17, 2026 Nov 22, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in res_pjsip_t38.c in Sangoma Asterisk through 13.x and Certified Asterisk through 13.21-x. If it receives a re-invite initiating T.38 faxing and has a port of 0 and no c line in the SDP, a NULL p...Show more An issue was discovered in res_pjsip_t38.c in Sangoma Asterisk through 13.x and Certified Asterisk through 13.21-x. If it receives a re-invite initiating T.38 faxing and has a port of 0 and no c line in the SDP, a NULL pointer dereference and crash will occur. This is different from CVE-2019-18940.Show less
CVE-2019-19227 1Linux 1Linux Kernel Jun 17, 2026 Nov 22, 2019 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 In the AppleTalk subsystem in the Linux kernel before 5.1, there is a potential NULL pointer dereference because register_snap_client may return NULL. This will lead to denial of service in net/appletalk/aarp.c and net/a...Show more In the AppleTalk subsystem in the Linux kernel before 5.1, there is a potential NULL pointer dereference because register_snap_client may return NULL. This will lead to denial of service in net/appletalk/aarp.c and net/appletalk/ddp.c, as demonstrated by unregister_snap_client, aka CID-9804501fa122.Show less
CVE-2019-19037 1Linux 1Linux Kernel Jun 17, 2026 Nov 21, 2019 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 ext4_empty_dir in fs/ext4/namei.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because ext4_read_dirblock(inode,0,DIRENT_HTREE) can be zero.
CVE-2019-19036 1Linux 1Linux Kernel Jun 17, 2026 Nov 21, 2019 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 btrfs_root_node in fs/btrfs/ctree.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because rcu_dereference(root->node) can be zero.
CVE-2019-19011 1Miniupnp Project 1Ngiflib Jun 17, 2026 Nov 17, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 MiniUPnP ngiflib 0.4 has a NULL pointer dereference in GifIndexToTrueColor in ngiflib.c via a file that lacks a palette.
CVE-2016-5285 5Avaya DebianMozilla+2 more 27Aura Application Enablement Services Aura Application Server 5300Aura Communication Manager+24 more Nov 21, 2024 Nov 15, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote malicious user cause a...Show more A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote malicious user cause a Denial of Service.Show less
CVE-2019-11111 2Intel Netapp 5Cloud Backup Data Availability ServicesGraphics Driver+2 more Jun 17, 2026 Nov 14, 2019 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Pointer corruption in the Unified Shader Compiler in Intel(R) Graphics Drivers before 10.18.14.5074 (aka 15.36.x.5074) may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2019-18885 1Linux 1Linux Kernel Jun 17, 2026 Nov 14, 2019 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfs_verify_dev_extents NULL pointer dereference via a crafted btrfs image because fs_devices->devices is mishandled within find_device, aka CID-09ba3bc9dd15.
CVE-2017-17224 1Huawei 1Hg655m Firmware Nov 21, 2024 Nov 12, 2019 N/A· v4 8.8 HIGH· v3 5.8 MEDIUM· v2 Some Huawei smart phones with versions earlier than Harry-AL00C 9.1.0.206(C00E205R3P1) have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this...Show more Some Huawei smart phones with versions earlier than Harry-AL00C 9.1.0.206(C00E205R3P1) have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this vulnerability. Successful exploitation may cause the affected phone abnormal.Show less
CVE-2011-1802 1Google 1Blink Nov 21, 2024 Nov 12, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 WebKit in Google Chrome before Blink M11 and M12 does not properly handle counter nodes, which allows remote attackers to cause a denial of service (memory corruption).
CVE-2010-2488 1Znc 1Znc Nov 21, 2024 Nov 12, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 NULL pointer dereference vulnerability in ZNC before 0.092 caused by traffic stats when there are unauthenticated connections.
CVE-2019-5691 1Nvidia 1Gpu Driver Jun 17, 2026 Nov 9, 2019 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which a NULL pointer is dereferenced, which may lead to denial of service or...Show more NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which a NULL pointer is dereferenced, which may lead to denial of service or escalation of privileges.Show less
CVE-2019-18804 5Canonical DebianDjvulibre Project+2 more 5Debian Linux DjvulibreFedora+2 more Jun 17, 2026 Nov 7, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.

Previous 1...217218219...272 Next