NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

CVEs (5,436)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-8936 5Fedoraproject HpeNetapp+2 more 6Clustered Data Ontap Data OntapFedora+3 more Jun 17, 2026 May 15, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 NTP through 4.2.8p12 has a NULL Pointer Dereference.
CVE-2019-12101 1Libnyoci Project 1Libnyoci Jun 17, 2026 May 15, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 coap_decode_option in coap.c in LibNyoci 0.07.00rc1 mishandles certain packets with "Uri-Path: (null)" and consequently allows remote attackers to cause a denial of service (segmentation fault).
CVE-2019-11419 1Tencent 1Wechat Jun 17, 2026 May 14, 2019 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 vcodec2_hls_filter in libvoipCodec_v7a.so in the WeChat application through 7.0.3 for Android allows attackers to cause a denial of service (application crash) by replacing an emoji file (under the /sdcard/tencent/MicroM...Show more vcodec2_hls_filter in libvoipCodec_v7a.so in the WeChat application through 7.0.3 for Android allows attackers to cause a denial of service (application crash) by replacing an emoji file (under the /sdcard/tencent/MicroMsg directory) with a crafted .wxgf file. The content of the replacement must be derived from the phone's IMEI. The crash occurs upon receiving a message that contains the replaced emoji.Show less
CVE-2018-4024 1Anker In 1Roav Dashcam A1 Firmware Nov 21, 2024 May 13, 2019 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 An exploitable denial-of-service vulnerability exists in the thumbnail display functionality of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted packet can cau...Show more An exploitable denial-of-service vulnerability exists in the thumbnail display functionality of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted packet can cause a null pointer dereference, resulting in a device reboot.Show less
CVE-2019-11494 3Dovecot FedoraprojectOpensuse 3Dovecot FedoraLeap Jun 17, 2026 May 8, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login service crashes when the client disconnects prematurely during the AUTH command.
CVE-2019-11810 3Canonical DebianLinux 3Debian Linux Linux KernelUbuntu Linux Jun 17, 2026 May 7, 2019 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 An issue was discovered in the Linux kernel before 5.0.7. A NULL pointer dereference can occur when megasas_create_frame_pool() fails in megasas_alloc_cmds() in drivers/scsi/megaraid/megaraid_sas_base.c. This causes a De...Show more An issue was discovered in the Linux kernel before 5.0.7. A NULL pointer dereference can occur when megasas_create_frame_pool() fails in megasas_alloc_cmds() in drivers/scsi/megaraid/megaraid_sas_base.c. This causes a Denial of Service, related to a use-after-free.Show less
CVE-2019-11638 1Gnu 1Recutils Jun 17, 2026 May 1, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in GNU recutils 1.8. There is a NULL pointer dereference in the function rec_field_name_equal_p at rec-field-name.c in librec.a, leading to a crash.
CVE-2019-11637 1Gnu 1Recutils Jun 17, 2026 May 1, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in GNU recutils 1.8. There is a NULL pointer dereference in the function rec_rset_get_props at rec-rset.c in librec.a, leading to a crash.
CVE-2019-11596 2Canonical Memcached 2Memcached Ubuntu Linux Jun 17, 2026 Apr 29, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru temp_ttl" commands. This causes a denial of service when parsing crafted lru command messages in process_lru_command in memcache...Show more In memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru temp_ttl" commands. This causes a denial of service when parsing crafted lru command messages in process_lru_command in memcached.c.Show less
CVE-2019-11555 1W1.fi 2Hostapd Wpa Supplicant Jun 17, 2026 Apr 26, 2019 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The EAP-pwd implementation in hostapd (EAP server) before 2.8 and wpa_supplicant (EAP peer) before 2.8 does not validate fragmentation reassembly state properly for a case where an unexpected fragment could be received....Show more The EAP-pwd implementation in hostapd (EAP server) before 2.8 and wpa_supplicant (EAP peer) before 2.8 does not validate fragmentation reassembly state properly for a case where an unexpected fragment could be received. This could result in process termination due to a NULL pointer dereference (denial of service). This affects eap_server/eap_server_pwd.c and eap_peer/eap_pwd.c.Show less
CVE-2018-18513 1Mozilla 1Thunderbird Nov 21, 2024 Apr 26, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A crash can occur when processing a crafted S/MIME message or an XPI package containing a crafted signature. This can be used as a denial-of-service (DOS) attack because Thunderbird reopens the last seen message on resta...Show more A crash can occur when processing a crafted S/MIME message or an XPI package containing a crafted signature. This can be used as a denial-of-service (DOS) attack because Thunderbird reopens the last seen message on restart, triggering the crash again. This vulnerability affects Thunderbird < 60.5.Show less
CVE-2018-7574 - - Nov 7, 2023 Apr 24, 2019 N/A· v4 N/A· v3 N/A· v2 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-7576, CVE-2018-21233. Reason: this candidate was intended for one issue, but the description and references inadvertently combined multiple issues....Show more Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-7576, CVE-2018-21233. Reason: this candidate was intended for one issue, but the description and references inadvertently combined multiple issues. Notes: All CVE users should consult CVE-2018-7576 and CVE-2018-21233 to determine which ID is appropriate. All references and descriptions in this candidate have been removed to prevent accidental usageShow less
CVE-2019-9635 1Google 1Tensorflow Jun 17, 2026 Apr 24, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 NULL pointer dereference in Google TensorFlow before 1.12.2 could cause a denial of service via an invalid GIF file.
CVE-2018-7576 1Google 1Tensorflow Jun 17, 2026 Apr 23, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Google TensorFlow 1.6.x and earlier is affected by: Null Pointer Dereference. The type of exploitation is: context-dependent.
CVE-2019-11366 1Atftp Project 1Atftp Jun 17, 2026 Apr 20, 2019 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in atftpd in atftp 0.7.1. It does not lock the thread_list_mutex mutex before assigning the current thread data structure. As a result, the daemon is vulnerable to a denial of service attack due t...Show more An issue was discovered in atftpd in atftp 0.7.1. It does not lock the thread_list_mutex mutex before assigning the current thread data structure. As a result, the daemon is vulnerable to a denial of service attack due to a NULL pointer dereference. If thread_data is NULL when assigned to current, and modified by another thread before a certain tftpd_list.c check, there is a crash when dereferencing current->next.Show less
CVE-2019-5008 1Qemu 1Qemu Jun 17, 2026 Apr 19, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 hw/sparc64/sun4u.c in QEMU 3.1.50 is vulnerable to a NULL pointer dereference, which allows the attacker to cause a denial of service via a device driver.
CVE-2019-11338 4Canonical DebianFfmpeg+1 more 4Debian Linux FfmpegSuse Package Hub For Suse Linux Enterprise+1 more Jun 17, 2026 Apr 19, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate first slices, which allows remote attackers to cause a denial of service (NULL pointer dereference and out-of-array access) or possibly have...Show more libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate first slices, which allows remote attackers to cause a denial of service (NULL pointer dereference and out-of-array access) or possibly have unspecified other impact via crafted HEVC data.Show less
CVE-2019-10901 5Canonical DebianFedoraproject+2 more 5Debian Linux FedoraLeap+2 more Jun 17, 2026 Apr 9, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by handling file digests properly.
CVE-2019-11023 1Graphviz 1Graphviz Jun 17, 2026 Apr 8, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 The agroot() function in cgraph\obj.c in libcgraph.a in Graphviz 2.39.20160612.1140 has a NULL pointer dereference, as demonstrated by graphml2gv.
CVE-2019-10873 1Freedesktop 1Poppler Jun 17, 2026 Apr 5, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in Poppler 0.74.0. There is a NULL pointer dereference in the function SplashClip::clipAALine at splash/SplashClip.cc.

Previous 1...224225226...272 Next