← Back
CWE-476

5,434 CVEs • Abstraction: Base • Likelihood of Exploit: Medium

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

JSON object

Loading...

CVEs (5,434)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Oct 5, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in PDFDelegateMessage in coders/pdf.c.
2Debian
Graphicsmagick
2Debian Linux
Graphicsmagick
May 13, 2026
Oct 4, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
ReadDCMImage in coders/dcm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted DICOM image, related to the ability of DCM_ReadNonNativeImages to yield...Show more
ReadDCMImage in coders/dcm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted DICOM image, related to the ability of DCM_ReadNonNativeImages to yield an image list with zero frames.Show less
2Debian
Freedesktop
2Debian Linux
Poppler
May 13, 2026
Oct 2, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The FoFiTrueType::getCFFBlock function in FoFiTrueType.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability due to lack of validation of a table pointer, which allows an attacker to launch a denial of servic...Show more
The FoFiTrueType::getCFFBlock function in FoFiTrueType.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability due to lack of validation of a table pointer, which allows an attacker to launch a denial of service attack.Show less
2Debian
Freedesktop
2Debian Linux
Poppler
May 13, 2026
Oct 2, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability because a data structure is not initialized, which allows an attacker to launch a denial of service...Show more
The FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability because a data structure is not initialized, which allows an attacker to launch a denial of service attack.Show less
1Gnu
1Binutils
May 13, 2026
Oct 2, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandle the failure of a certain canonicalization step, which allows remote attackers...Show more
The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandle the failure of a certain canonicalization step, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to elf32-i386.c and elf64-x86-64.c.Show less
1Gnu
1Binutils
May 13, 2026
Sep 30, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
scan_unit_for_symbols in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (NULL pointer dereference and applicat...Show more
scan_unit_for_symbols in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file.Show less
2Debian
Freedesktop
2Debian Linux
Poppler
May 13, 2026
Sep 30, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
In Poppler 0.59.0, a NULL Pointer Dereference exists in AnnotRichMedia::Configuration::Configuration in Annot.cc via a crafted PDF document.
1Freedesktop
1Poppler
May 13, 2026
Sep 30, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
In Poppler 0.59.0, a NULL Pointer Dereference exists in the SplashOutputDev::type3D0() function in SplashOutputDev.cc via a crafted PDF document.
2Debian
Freedesktop
2Debian Linux
Poppler
May 13, 2026
Sep 30, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
In Poppler 0.59.0, a NULL Pointer Dereference exists in AnnotRichMedia::Content::Content in Annot.cc via a crafted PDF document.
1Exiv2
1Exiv2
May 13, 2026
Sep 29, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A NULL pointer dereference was discovered in Exiv2::Image::printIFDStructure in image.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
1Imagemagick
1Imagemagick
May 13, 2026
Sep 26, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The AcquireResampleFilterThreadSet function in magick/resample-private.h in ImageMagick 7.0.7-4 mishandles failed memory allocation, which allows remote attackers to cause a denial of service (NULL Pointer Dereference in...Show more
The AcquireResampleFilterThreadSet function in magick/resample-private.h in ImageMagick 7.0.7-4 mishandles failed memory allocation, which allows remote attackers to cause a denial of service (NULL Pointer Dereference in DistortImage in MagickCore/distort.c, and application crash) via unspecified vectors.Show less
1Bento4
1Bento4
May 13, 2026
Sep 21, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A NULL pointer dereference was discovered in the AP4_HdlrAtom class in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash in AP4_StdcFileByteStream::ReadPartial in System/StdC/A...Show more
A NULL pointer dereference was discovered in the AP4_HdlrAtom class in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash in AP4_StdcFileByteStream::ReadPartial in System/StdC/Ap4StdCFileByteStream.cpp, which leads to remote denial of service.Show less
1Bento4
1Bento4
May 13, 2026
Sep 21, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A NULL pointer dereference was discovered in the AP4_DataAtom class in MetaData/Ap4MetaData.cpp in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash, which leads to remote deni...Show more
A NULL pointer dereference was discovered in the AP4_DataAtom class in MetaData/Ap4MetaData.cpp in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of service.Show less
1Bento4
1Bento4
May 13, 2026
Sep 21, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A NULL pointer dereference was discovered in AP4_AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash, which leads to...Show more
A NULL pointer dereference was discovered in AP4_AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of service.Show less
1Bento4
1Bento4
May 13, 2026
Sep 21, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
AP4_AtomFactory::CreateAtomFromStream in Core/Ap4AtomFactory.cpp in Bento4 version 1.5.0-617 has missing NULL checks, leading to a NULL pointer dereference, segmentation fault, and application crash in AP4_Atom::SetType...Show more
AP4_AtomFactory::CreateAtomFromStream in Core/Ap4AtomFactory.cpp in Bento4 version 1.5.0-617 has missing NULL checks, leading to a NULL pointer dereference, segmentation fault, and application crash in AP4_Atom::SetType in Core/Ap4Atom.h.Show less
3Canonical
DebianLinux
3Debian Linux
Linux KernelUbuntu Linux
May 13, 2026
Sep 21, 2017
N/A· v4
4.4 MEDIUM· v3
4.9 MEDIUM· v2
A security flaw was discovered in the nl80211_set_rekey_data() function in net/wireless/nl80211.c in the Linux kernel through 4.13.3. This function does not check whether the required attributes are present in a Netlink...Show more
A security flaw was discovered in the nl80211_set_rekey_data() function in net/wireless/nl80211.c in the Linux kernel through 4.13.3. This function does not check whether the required attributes are present in a Netlink request. This request can be issued by a user with the CAP_NET_ADMIN capability and may result in a NULL pointer dereference and system crash.Show less
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Sep 21, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_decode in coders/sixel.c.
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Sep 21, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_output_create in coders/sixel.c.
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Sep 21, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function PostscriptDelegateMessage in coders/ps.c.
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Sep 18, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
ImageMagick 7.0.7-0 has a NULL Pointer Dereference in TIFFIgnoreTags in coders/tiff.c.