NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

CVEs (5,434)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-15096 1Gluster 1Glusterfs May 13, 2026 Oct 26, 2017 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 A flaw was found in GlusterFS in versions prior to 3.10. A null pointer dereference in send_brick_req function in glusterfsd/src/gf_attach.c may be used to cause denial of service.
CVE-2017-15723 2Debian Irssi 2Debian Linux Irssi May 13, 2026 Oct 22, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In Irssi before 1.0.5, overlong nicks or targets may result in a NULL pointer dereference while splitting the message.
CVE-2017-15721 2Debian Irssi 2Debian Linux Irssi May 13, 2026 Oct 22, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In Irssi before 1.0.5, certain incorrectly formatted DCC CTCP messages could cause a NULL pointer dereference. This is a separate, but similar, issue relative to CVE-2017-9468.
CVE-2017-15600 1Gnu 1Libextractor May 13, 2026 Oct 18, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In GNU Libextractor 1.4, there is a NULL Pointer Dereference in the EXTRACTOR_nsf_extract_method function of plugins/nsf_extractor.c.
CVE-2014-3164 1Google 1Android May 13, 2026 Oct 18, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 cmds/servicemanager/service_manager.c in Android before commit 7d42a3c31ba78a418f9bdde0e0ab951469f321b5 allows attackers to cause a denial of service (NULL pointer dereference, or out-of-bounds write) via vectors related...Show more cmds/servicemanager/service_manager.c in Android before commit 7d42a3c31ba78a418f9bdde0e0ab951469f321b5 allows attackers to cause a denial of service (NULL pointer dereference, or out-of-bounds write) via vectors related to binder passed lengths.Show less
CVE-2017-15565 2Debian Freedesktop 2Debian Linux Poppler May 13, 2026 Oct 17, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 In Poppler 0.59.0, a NULL Pointer Dereference exists in the GfxImageColorMap::getGrayLine() function in GfxState.cc via a crafted PDF document.
CVE-2017-15299 1Linux 1Linux Kernel May 13, 2026 Oct 14, 2017 N/A· v4 5.5 MEDIUM· v3 4.9 MEDIUM· v2 The KEYS subsystem in the Linux kernel through 4.13.7 mishandles use of add_key for a key that already exists but is uninstantiated, which allows local users to cause a denial of service (NULL pointer dereference and sys...Show more The KEYS subsystem in the Linux kernel through 4.13.7 mishandles use of add_key for a key that already exists but is uninstantiated, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted system call.Show less
CVE-2017-15286 1Sqlite 1Sqlite May 13, 2026 Oct 12, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where `sqlite3_step(pStmt)==SQLITE_ROW` is false and a data structure is never initialized.
CVE-2017-15274 1Linux 1Linux Kernel May 13, 2026 Oct 12, 2017 N/A· v4 5.5 MEDIUM· v3 4.9 MEDIUM· v2 security/keys/keyctl.c in the Linux kernel before 4.11.5 does not consider the case of a NULL payload in conjunction with a nonzero length value, which allows local users to cause a denial of service (NULL pointer derefe...Show more security/keys/keyctl.c in the Linux kernel before 4.11.5 does not consider the case of a NULL payload in conjunction with a nonzero length value, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted add_key or keyctl system call, a different vulnerability than CVE-2017-12192.Show less
CVE-2017-12192 1Linux 1Linux Kernel May 13, 2026 Oct 12, 2017 N/A· v4 5.5 MEDIUM· v3 4.9 MEDIUM· v2 The keyctl_read_key function in security/keys/keyctl.c in the Key Management subcomponent in the Linux kernel before 4.13.5 does not properly consider that a key may be possessed but negatively instantiated, which allows...Show more The keyctl_read_key function in security/keys/keyctl.c in the Key Management subcomponent in the Linux kernel before 4.13.5 does not properly consider that a key may be possessed but negatively instantiated, which allows local users to cause a denial of service (OOPS and system crash) via a crafted KEYCTL_READ operation.Show less
CVE-2017-15267 1Gnu 1Libextractor May 13, 2026 Oct 11, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In GNU Libextractor 1.4, there is a NULL Pointer Dereference in flac_metadata in flac_extractor.c.
CVE-2017-15232 1Libjpeg Turbo 1Libjpeg Turbo May 13, 2026 Oct 11, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file.
CVE-2017-11063 1Google 1Android May 13, 2026 Oct 10, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, as a result of a race condition between two userspace processes that interact with the driver concurrently,...Show more In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, as a result of a race condition between two userspace processes that interact with the driver concurrently, a null pointer dereference can potentially occur.Show less
CVE-2015-2297 1Libcsoap Project 1Libcsoap May 13, 2026 Oct 6, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 nanohttp in libcsoap allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Authorization header.
CVE-2017-15056 1Upx 1Upx May 13, 2026 Oct 6, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 p_lx_elf.cpp in UPX 3.94 mishandles ELF headers, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by an I...Show more p_lx_elf.cpp in UPX 3.94 mishandles ELF headers, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by an Invalid Pointer Read in PackLinuxElf64::unpack().Show less
CVE-2017-15023 1Gnu 1Binutils May 13, 2026 Oct 5, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not properly validate the format count, which allows remote attackers to cause a deni...Show more read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not properly validate the format count, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to concat_filename.Show less
CVE-2017-15022 1Gnu 1Binutils May 13, 2026 Oct 5, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the DW_AT_name data type, which allows remote attackers to cause a denial of service (bfd_hash_has...Show more dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the DW_AT_name data type, which allows remote attackers to cause a denial of service (bfd_hash_hash NULL pointer dereference, or out-of-bounds access, and application crash) via a crafted ELF file, related to scan_unit_for_symbols and parse_comp_unit.Show less
CVE-2017-15019 1Lame Project 1Lame May 13, 2026 Oct 5, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 LAME 3.99.5 has a NULL Pointer Dereference in the hip_decode_init function within libmp3lame/mpglib_interface.c via a malformed mpg file, because of an incorrect calloc call.
CVE-2017-15017 2Canonical Imagemagick 2Imagemagick Ubuntu Linux May 13, 2026 Oct 5, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadOneMNGImage in coders/png.c.
CVE-2017-15016 2Canonical Imagemagick 2Imagemagick Ubuntu Linux May 13, 2026 Oct 5, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadEnhMetaFile in coders/emf.c.

Previous 1...247248249...272 Next