← Back
CWE-476

5,434 CVEs • Abstraction: Base • Likelihood of Exploit: Medium

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

JSON object

Loading...

CVEs (5,434)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Libming
1Libming
Jun 17, 2026
Apr 1, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
The pushdup function in util/decompile.c in libming through 0.4.8 does not recognize the need for ActionPushDuplicate to perform a deep copy when a String is at the top of the stack, making the library vulnerable to a ut...Show more
The pushdup function in util/decompile.c in libming through 0.4.8 does not recognize the need for ActionPushDuplicate to perform a deep copy when a String is at the top of the stack, making the library vulnerable to a util/decompile.c getName NULL pointer dereference, which may allow attackers to cause a denial of service via a crafted SWF file.Show less
1Google
1Android
Nov 21, 2024
Mar 30, 2018
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
When an atomic commit is issued on a writeback panel with a NULL output_layer parameter in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-06-03, a NULL pointer dereference may potentially occur.
1Google
1Android
Nov 21, 2024
Mar 30, 2018
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
In the video_ioctl2() function in the camera driver in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-09-16, an untrusted pointer dereference may potentially occur.
1Kingsoft
1Internet Security 9 Plus
Jun 17, 2026
Mar 30, 2018
N/A· v4
5.5 MEDIUM· v3
4.9 MEDIUM· v2
A NULL pointer dereference bug in the function ObReferenceObjectByHandle in the Kingsoft Internet Security 9+ kernel driver KWatch3.sys allows local non-privileged users to crash the system via IOCTL 0x80030030.
2Debian
Libming
2Debian Linux
Libming
Jun 17, 2026
Mar 30, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
libming 0.4.8 has a NULL pointer dereference in the getInt function of the decompile.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file.
1Imagemagick
1Imagemagick
Nov 21, 2024
Mar 27, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in ImageMagick 7.0.7. A NULL pointer dereference vulnerability was found in the function LoadOpenCLDevices in MagickCore/opencl.c, which allows attackers to cause a denial of service via a crafted...Show more
An issue was discovered in ImageMagick 7.0.7. A NULL pointer dereference vulnerability was found in the function LoadOpenCLDevices in MagickCore/opencl.c, which allows attackers to cause a denial of service via a crafted file.Show less
1Imagemagick
1Imagemagick
Nov 21, 2024
Mar 27, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in ImageMagick 7.0.7. A NULL pointer dereference vulnerability was found in the function LogOpenCLBuildFailure in MagickCore/opencl.c, which allows attackers to cause a denial of service via a cra...Show more
An issue was discovered in ImageMagick 7.0.7. A NULL pointer dereference vulnerability was found in the function LogOpenCLBuildFailure in MagickCore/opencl.c, which allows attackers to cause a denial of service via a crafted file.Show less
3Apache
CanonicalNetapp
6Clustered Data Ontap
Http ServerSantricity Cloud Connector+3 more
Nov 21, 2024
Mar 26, 2018
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2.4.30 could have written a NULL pointer potentially to an already freed memory. The memory pools maintained by the server...Show more
When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2.4.30 could have written a NULL pointer potentially to an already freed memory. The memory pools maintained by the server make this vulnerability hard to trigger in usual configurations, the reporter and the team could not reproduce it outside debug builds, so it is classified as low risk.Show less
1Libav
1Libav
Nov 21, 2024
Mar 23, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
The av_audio_fifo_size function in libavutil/audio_fifo.c in Libav 12.2 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted media file.
1Omron
1Cx Supervisor
Jun 17, 2026
Mar 21, 2018
N/A· v4
5.3 MEDIUM· v3
4.6 MEDIUM· v2
In Omron CX-Supervisor Versions 3.30 and prior, processing a malformed packet by a certain executable may cause an untrusted pointer dereference vulnerability.
3Canonical
DebianLinux
3Debian Linux
Linux KernelUbuntu Linux
Nov 21, 2024
Mar 21, 2018
N/A· v4
5.5 MEDIUM· v3
4.9 MEDIUM· v2
fs/f2fs/segment.c in the Linux kernel before 4.13 allows local users to cause a denial of service (NULL pointer dereference and panic) by using a noflush_merge option that triggers a NULL value for a flush_cmd_control da...Show more
fs/f2fs/segment.c in the Linux kernel before 4.13 allows local users to cause a denial of service (NULL pointer dereference and panic) by using a noflush_merge option that triggers a NULL value for a flush_cmd_control data structure.Show less
2Fedoraproject
Redhat
2Ceph
Fedora
Jun 17, 2026
Mar 19, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Ceph before 12.2.3 and 13.x through 13.0.1, the rgw_civetweb.cc RGWCivetWeb::init_env function in radosgw doesn't handle malformed HTTP headers properly, allowing for denial of service.
2Debian
Sqlite
2Debian Linux
Sqlite
Jun 17, 2026
Mar 17, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c.
1Google
1Android
Nov 21, 2024
Mar 16, 2018
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, untrusted pointer dereference in update_userspace_power() function in power leads to information exposure.
1Exempi Project
1Exempi
Nov 21, 2024
Mar 15, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in Exempi before 2.4.3. The PostScript_Support::ConvertToDate function in XMPFiles/source/FormatSupport/PostScript_Support.cpp allows remote attackers to cause a denial of service (invalid pointer...Show more
An issue was discovered in Exempi before 2.4.3. The PostScript_Support::ConvertToDate function in XMPFiles/source/FormatSupport/PostScript_Support.cpp allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via a crafted .ps file.Show less
5Canonical
DebianHaxx+2 more
9Communications Webrtc Session Controller
CurlDebian Linux+6 more
Nov 21, 2024
Mar 14, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker to cause a denial of service
2Debian
Graphicsmagick
2Debian Linux
Graphicsmagick
Nov 21, 2024
Mar 14, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadEnhMetaFile in coders/emf.c, which allows attackers to cause a denial of service via a crafted file...Show more
An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadEnhMetaFile in coders/emf.c, which allows attackers to cause a denial of service via a crafted file.Show less
2Debian
Graphicsmagick
2Debian Linux
Graphicsmagick
Nov 21, 2024
Mar 14, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadCINEONImage in coders/cineon.c, which allows attackers to cause a denial of service via a crafted f...Show more
An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadCINEONImage in coders/cineon.c, which allows attackers to cause a denial of service via a crafted file.Show less
4Canonical
DebianRedhat+1 more
6Debian Linux
Enterprise Linux DesktopEnterprise Linux Server+3 more
Nov 21, 2024
Mar 13, 2018
N/A· v4
4.3 MEDIUM· v3
3.3 LOW· v2
All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on some of the input par...Show more
All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on some of the input parameters to spoolss RPC calls could cause the print spooler service to crash.Show less
3Canonical
Jasper ProjectRedhat
8Enterprise Linux Desktop
Enterprise Linux ServerEnterprise Linux Server Aus+5 more
Nov 21, 2024
Mar 12, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
JasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded creation of JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash.