← Back
CWE-476

5,435 CVEs • Abstraction: Base • Likelihood of Exploit: Medium

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

JSON object

Loading...

CVEs (5,435)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Libming
1Libming
Nov 21, 2024
Dec 24, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
libming 0.4.8 has a NULL pointer dereference in the pushdup function of the decompile.c file.
1Libraw
1Libraw
Nov 21, 2024
Dec 22, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
LibRaw::copy_bayer in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference.
1Libraw
1Libraw
Nov 21, 2024
Dec 22, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
LibRaw::raw2image in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference.
1Audiocoding
1Freeware Advanced Audio Decoder 2
Nov 21, 2024
Dec 22, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash because adding to wi...Show more
A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash because adding to windowed output is mishandled in the EIGHT_SHORT_SEQUENCE case.Show less
1Audiocoding
1Freeware Advanced Audio Decoder 2
Nov 21, 2024
Dec 22, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A NULL pointer dereference was discovered in sbr_process_channel of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash.
1Igraph
1Igraph
Nov 21, 2024
Dec 22, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
The igraph_i_strdiff function in igraph_trie.c in igraph through 0.7.1 has an NULL pointer dereference that allows attackers to cause a denial of service (application crash) via a crafted object.
3Canonical
FedoraprojectQemu
3Fedora
QemuUbuntu Linux
Nov 21, 2024
Dec 20, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
hw/rdma/vmw/pvrdma_main.c in QEMU does not implement a read operation (such as uar_read by analogy to uar_write), which allows attackers to cause a denial of service (NULL pointer dereference).
2Canonical
Qemu
2Qemu
Ubuntu Linux
Nov 21, 2024
Dec 20, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
hw/rdma/vmw/pvrdma_cmd.c in QEMU allows attackers to cause a denial of service (NULL pointer dereference or excessive memory allocation) in create_cq_ring or create_qp_rings.
3Fedoraproject
LibarchiveOpensuse
3Fedora
LeapLibarchive
Nov 21, 2024
Dec 20, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards (release v3.3.0 onwards) contains a CWE-476: NULL Pointer Dereference vulnerability in ACL parser - libarchive/archive_acl.c, archive_acl_from_te...Show more
libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards (release v3.3.0 onwards) contains a CWE-476: NULL Pointer Dereference vulnerability in ACL parser - libarchive/archive_acl.c, archive_acl_from_text_l() that can result in Crash/DoS. This attack appear to be exploitable via the victim must open a specially crafted archive file.Show less
3Canonical
DebianLibvnc Project
3Debian Linux
LibvncserverUbuntu Linux
Nov 21, 2024
Dec 19, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
LibVNC before commit 4a21bbd097ef7c44bb000c3bd0907f96a10e4ce7 contains null pointer dereference in VNC client code that can result DoS.
2Audiocoding
Debian
2Debian Linux
Freeware Advanced Audio Decoder 2
Nov 21, 2024
Dec 18, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to deni...Show more
A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service because adding to windowed output is mishandled in the ONLY_LONG_SEQUENCE case.Show less
1Audiocoding
1Freeware Advanced Audio Decoder 2
Nov 21, 2024
Dec 18, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to deni...Show more
A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service because adding to windowed output is mishandled in the LONG_START_SEQUENCE case.Show less
1Audiocoding
1Freeware Advanced Audio Decoder 2
Nov 21, 2024
Dec 18, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A NULL pointer dereference was discovered in ic_predict of libfaad/ic_predict.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to deni...Show more
A NULL pointer dereference was discovered in ic_predict of libfaad/ic_predict.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.Show less
1Sass Lang
1Libsass
Nov 21, 2024
Dec 17, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Eval::operator()(Sass::Supports_Operator*) in eval.cpp may cause a Denial of Service (application crash) via a crafted sass input file.
1Samsung
1Galaxy S6 Firmware
Nov 21, 2024
Dec 17, 2018
N/A· v4
4.3 MEDIUM· v3
3.3 LOW· v2
A NULL pointer dereference in dhd_prot_txdata_write_flush in drivers/net/wireless/bcmdhd4358/dhd_msgbuf.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker (who has obtaine...Show more
A NULL pointer dereference in dhd_prot_txdata_write_flush in drivers/net/wireless/bcmdhd4358/dhd_msgbuf.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker (who has obtained code execution on the Wi-Fi chip) to cause the device to reboot. The Samsung ID is SVE-2018-11783.Show less
2Canonical
Libraw
2Libraw
Ubuntu Linux
Jun 17, 2026
Dec 7, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An error within the "nikon_coolscan_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to trigger a NULL pointer dereference.
2Libraw
Redhat
4Enterprise Linux Desktop
Enterprise Linux ServerEnterprise Linux Workstation+1 more
Jun 17, 2026
Dec 7, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An error within the "leaf_hdr_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.8 can be exploited to trigger a NULL pointer dereference.
4Canonical
DebianLibraw+1 more
6Debian Linux
Enterprise Linux DesktopEnterprise Linux Server+3 more
Jun 17, 2026
Dec 7, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An error within the "LibRaw::unpack()" function (src/libraw_cxx.cpp) in LibRaw versions prior to 0.18.7 can be exploited to trigger a NULL pointer dereference.
1Mi
2Mi A2 Lite Firmware
Redmi 6 Firmware
Nov 21, 2024
Dec 7, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The Goodix GT9xx touchscreen driver for custom Linux kernels on Xiaomi daisy-o-oss and daisy-p-oss as used in Mi A2 Lite and RedMi6 pro devices through 2018-08-27 has a NULL pointer dereference in kfree after a kmalloc f...Show more
The Goodix GT9xx touchscreen driver for custom Linux kernels on Xiaomi daisy-o-oss and daisy-p-oss as used in Mi A2 Lite and RedMi6 pro devices through 2018-08-27 has a NULL pointer dereference in kfree after a kmalloc failure in gtp_read_Color in drivers/input/touchscreen/gt917d/gt9xx.c.Show less
2Debian
Php
2Debian Linux
Php
Nov 21, 2024
Dec 7, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
ext/imap/php_imap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty string in the message argument to the imap_mail funct...Show more
ext/imap/php_imap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty string in the message argument to the imap_mail function.Show less