NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

CVEs (5,435)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-16004 1Adobe 2Acrobat Dc Acrobat Reader Dc Nov 21, 2024 Jan 18, 2019 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, an...Show more Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution.Show less
CVE-2017-3135 4Debian IscNetapp+1 more 10Bind Data Ontap EdgeDebian Linux+7 more Nov 21, 2024 Jan 16, 2019 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL poin...Show more Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -> 9.9.9-S7, 9.9.3 -> 9.9.9-P5, 9.9.10b1, 9.10.0 -> 9.10.4-P5, 9.10.5b1, 9.11.0 -> 9.11.0-P2, 9.11.1b1.Show less
CVE-2019-6460 1Gnu 1Recutils Jun 17, 2026 Jan 16, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in GNU Recutils 1.8. There is a NULL pointer dereference in the function rec_field_set_name() in the file rec-field.c in librec.a.
CVE-2019-6456 1Gnu 1Recutils Jun 17, 2026 Jan 16, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in GNU Recutils 1.8. There is a NULL pointer dereference in the function rec_fex_size() in the file rec-fex.c of librec.a.
CVE-2019-6445 1Ntpsec 1Ntpsec Jun 17, 2026 Jan 16, 2019 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can cause a NULL pointer dereference and ntpd crash in ntp_control.c, related to ctl_getitem.
CVE-2019-6137 1Mz Automation 1Lib60870 Jun 17, 2026 Jan 11, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in lib60870 2.1.1. LinkLayer_setAddress in link_layer/link_layer.c has a NULL pointer dereference.
CVE-2019-5007 1Foxitsoftware 2Foxit Reader Phantompdf Jun 17, 2026 Jan 3, 2019 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. It is an Out-of-Bounds Read Information Disclosure and crash due to a NULL pointer dereference when reading TIFF data during TIFF parsing.
CVE-2019-5006 1Foxitsoftware 2Foxit Reader Phantompdf Jun 17, 2026 Jan 3, 2019 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. It is a NULL pointer dereference during PDF parsing.
CVE-2018-20651 1Gnu 1Binutils Nov 21, 2024 Jan 1, 2019 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31.1. This occurs for a crafted ET_DYN with...Show more A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31.1. This occurs for a crafted ET_DYN with no program headers. A specially crafted ELF file allows remote attackers to cause a denial of service, as demonstrated by ld.Show less
CVE-2018-6343 1Facebook 1Proxygen Jun 17, 2026 Dec 31, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Proxygen fails to validate that a secondary auth manager is set before dereferencing it. That can cause a denial of service issue when parsing a Certificate/CertificateRequest HTTP2 Frame over a fizz (TLS 1.3) transport....Show more Proxygen fails to validate that a secondary auth manager is set before dereferencing it. That can cause a denial of service issue when parsing a Certificate/CertificateRequest HTTP2 Frame over a fizz (TLS 1.3) transport. This issue affects Proxygen releases starting from v2018.10.29.00 until the fix in v2018.11.19.00.Show less
CVE-2018-20537 1Liblas 1Liblas Nov 21, 2024 Dec 28, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 There is a NULL pointer dereference at liblas::SpatialReference::GetGTIF() (spatialreference.cpp) in libLAS 1.8.1 that will cause a denial of service.
CVE-2018-20533 2Canonical Opensuse 2Libsolv Ubuntu Linux Nov 21, 2024 Dec 28, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service.
CVE-2018-20532 2Canonical Opensuse 2Libsolv Ubuntu Linux Nov 21, 2024 Dec 28, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 There is a NULL pointer dereference at ext/testcase.c (function testcase_read) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service.
CVE-2018-19870 3Debian OpensuseQt 3Debian Linux LeapQt Nov 21, 2024 Dec 26, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
CVE-2018-20481 3Canonical DebianFreedesktop 3Debian Linux PopplerUbuntu Linux Nov 21, 2024 Dec 26, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted PDF document, when XRefEntry::setFlag i...Show more XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted PDF document, when XRefEntry::setFlag in XRef.h is called from Parser::makeStream in Parser.cc.Show less
CVE-2018-20431 2Debian Gnu 2Debian Linux Libextractor Nov 21, 2024 Dec 24, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 GNU Libextractor through 1.8 has a NULL Pointer Dereference vulnerability in the function process_metadata() in plugins/ole2_extractor.c.
CVE-2018-20429 1Libming 1Libming Nov 21, 2024 Dec 24, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 libming 0.4.8 has a NULL pointer dereference in the getName function of the decompile.c file, a different vulnerability than CVE-2018-7872 and CVE-2018-9165.
CVE-2018-20428 1Libming 1Libming Nov 21, 2024 Dec 24, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 libming 0.4.8 has a NULL pointer dereference in the strlenext function of the decompile.c file, a different vulnerability than CVE-2018-7874.
CVE-2018-20427 1Libming 1Libming Nov 21, 2024 Dec 24, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 libming 0.4.8 has a NULL pointer dereference in the getInt function of the decompile.c file, a different vulnerability than CVE-2018-9132.
CVE-2018-20426 1Libming 1Libming Nov 21, 2024 Dec 24, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 libming 0.4.8 has a NULL pointer dereference in the newVar3 function of the decompile.c file, a different vulnerability than CVE-2018-7866.

Previous 1...227228229...272 Next