NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

CVEs (5,435)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-19210 3Canonical DebianLibtiff 3Debian Linux LibtiffUbuntu Linux Nov 21, 2024 Nov 12, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 In LibTIFF 4.0.9, there is a NULL pointer dereference in the TIFFWriteDirectorySec function in tif_dirwrite.c that will lead to a denial of service attack, as demonstrated by tiffset.
CVE-2018-19209 1Nasm 1Netwide Assembler Nov 21, 2024 Nov 12, 2018 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Netwide Assembler (NASM) 2.14rc15 has a NULL pointer dereference in the function find_label in asm/labels.c that will lead to a DoS attack.
CVE-2018-19208 3Libwpd Project RedhatSuse 3Enterprise Linux LibwpdSuse Linux Enterprise Server Nov 21, 2024 Nov 12, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 In libwpd 0.10.2, there is a NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp that will lead to a denial of service attack. This is related to WPXTable.h.
CVE-2018-19200 2Debian Uriparser Project 2Debian Linux Uriparser Nov 21, 2024 Nov 12, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in uriparser before 0.9.0. UriCommon.c allows attempted operations on NULL input via a uriResetUri* function.
CVE-2018-19184 1Ethereum 1Go Ethereum Nov 21, 2024 Nov 12, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 cmd/evm/runner.go in Go Ethereum (aka geth) 1.8.17 allows attackers to cause a denial of service (SEGV) via crafted bytecode.
CVE-2018-19149 2Canonical Freedesktop 2Poppler Ubuntu Linux Nov 21, 2024 Nov 10, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Poppler before 0.70.0 has a NULL pointer dereference in _poppler_attachment_new when called from poppler_annot_file_attachment_get_attachment.
CVE-2018-19129 1Libav 1Libav Nov 21, 2024 Nov 9, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 In Libav 12.3, a NULL pointer dereference (RIP points to zero) issue in ff_mpa_synth_filter_float in libavcodec/mpegaudiodsp_template.c can cause a segmentation fault (application crash) via a crafted mov file.
CVE-2018-19122 1Mz Automation 1Libiec61850 Nov 21, 2024 Nov 9, 2018 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 An issue has been found in libIEC61850 v1.3. It is a NULL pointer dereference in Ethernet_sendPacket in ethernet_bsd.c.
CVE-2018-19121 1Mz Automation 1Libiec61850 Nov 21, 2024 Nov 9, 2018 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 An issue has been found in libIEC61850 v1.3. It is a SEGV in Ethernet_receivePacket in ethernet_bsd.c.
CVE-2018-19060 2Canonical Freedesktop 2Poppler Ubuntu Linux Nov 21, 2024 Nov 7, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in Poppler 0.71.0. There is a NULL pointer dereference in goo/GooString.h, will lead to denial of service, as demonstrated by utils/pdfdetach.cc not validating a filename of an embedded file befor...Show more An issue was discovered in Poppler 0.71.0. There is a NULL pointer dereference in goo/GooString.h, will lead to denial of service, as demonstrated by utils/pdfdetach.cc not validating a filename of an embedded file before constructing a save path.Show less
CVE-2018-18937 1Mz Automation 1Libiec61850 Nov 21, 2024 Nov 5, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue has been found in libIEC61850 v1.3. It is a NULL pointer dereference in ClientDataSet_getValues in client/ied_connection.c.
CVE-2018-18883 1Xen 1Xen Nov 21, 2024 Nov 1, 2018 N/A· v4 8.8 HIGH· v3 7.2 HIGH· v2 An issue was discovered in Xen 4.9.x through 4.11.x, on Intel x86 platforms, allowing x86 HVM and PVH guests to cause a host OS denial of service (NULL pointer dereference) or possibly have unspecified other impact becau...Show more An issue was discovered in Xen 4.9.x through 4.11.x, on Intel x86 platforms, allowing x86 HVM and PVH guests to cause a host OS denial of service (NULL pointer dereference) or possibly have unspecified other impact because nested VT-x is not properly restricted.Show less
CVE-2018-18873 4Canonical DebianJasper Project+1 more 5Debian Linux JasperLinux Enterprise Desktop+2 more Nov 21, 2024 Oct 31, 2018 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function ras_putdatastd in ras/ras_enc.c.
CVE-2018-18829 1Libav 1Libav Nov 21, 2024 Oct 30, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 There exists a NULL pointer dereference in ff_vc1_parse_frame_header_adv in vc1.c in Libav 12.3, which allows attackers to cause a denial-of-service through a crafted aac file.
CVE-2018-18661 2Canonical Libtiff 2Libtiff Ubuntu Linux Nov 21, 2024 Oct 26, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in LibTIFF 4.0.9. There is a NULL pointer dereference in the function LZWDecode in the file tif_lzw.c.
CVE-2018-18607 3Debian GnuNetapp 3Binutils Data OntapDebian Linux Nov 21, 2024 Oct 23, 2018 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in elf_link_input_bfd in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. There is a NULL pointer dereference in elf_link_input_bfd when use...Show more An issue was discovered in elf_link_input_bfd in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. There is a NULL pointer dereference in elf_link_input_bfd when used for finding STT_TLS symbols without any TLS section. A specially crafted ELF allows remote attackers to cause a denial of service, as demonstrated by ld.Show less
CVE-2018-18606 3Debian GnuNetapp 3Binutils Data OntapDebian Linux Nov 21, 2024 Oct 23, 2018 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in the merge_strings function in merge.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. There is a NULL pointer dereference in _bfd_add_merge_sectio...Show more An issue was discovered in the merge_strings function in merge.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. There is a NULL pointer dereference in _bfd_add_merge_section when attempting to merge sections with large alignments. A specially crafted ELF allows remote attackers to cause a denial of service, as demonstrated by ld.Show less
CVE-2018-18329 1Trendmicro 3Antivirus For Mac 2017 Antivirus For Mac 2018Antivirus For Mac 2019 Nov 21, 2024 Oct 23, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a local attacker to escalate privileges on vulnerable installatio...Show more A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a local attacker to escalate privileges on vulnerable installations. The issue results from the lack of proper validation function on 0x6F4E offset user-supplied buffer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.Show less
CVE-2018-18328 1Trendmicro 3Antivirus For Mac 2017 Antivirus For Mac 2018Antivirus For Mac 2019 Nov 21, 2024 Oct 23, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a local attacker to escalate privileges on vulnerable installatio...Show more A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a local attacker to escalate privileges on vulnerable installations. The issue results from the lack of proper validation function on 0x6F6A offset user-supplied buffer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.Show less
CVE-2018-18327 1Trendmicro 3Antivirus For Mac 2017 Antivirus For Mac 2018Antivirus For Mac 2019 Nov 21, 2024 Oct 23, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a local attacker to escalate privileges on vulnerable installatio...Show more A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could allow a local attacker to escalate privileges on vulnerable installations. The issue results from the lack of proper validation function on 0x6eDC offset user-supplied buffer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.Show less

Previous 1...230231232...272 Next