← Back
CWE-476

5,859 CVEs • Abstraction: Base • Likelihood of Exploit: Medium

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

JSON object

Loading...

CVEs (5,859)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-20429
1Libming
1Libming
Nov 21, 2024
Dec 24, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
libming 0.4.8 has a NULL pointer dereference in the getName function of the decompile.c file, a different vulnerability than CVE-2018-7872 and CVE-2018-9165.
CVE-2018-20428
1Libming
1Libming
Nov 21, 2024
Dec 24, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
libming 0.4.8 has a NULL pointer dereference in the strlenext function of the decompile.c file, a different vulnerability than CVE-2018-7874.
CVE-2018-20427
1Libming
1Libming
Nov 21, 2024
Dec 24, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
libming 0.4.8 has a NULL pointer dereference in the getInt function of the decompile.c file, a different vulnerability than CVE-2018-9132.
CVE-2018-20426
1Libming
1Libming
Nov 21, 2024
Dec 24, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
libming 0.4.8 has a NULL pointer dereference in the newVar3 function of the decompile.c file, a different vulnerability than CVE-2018-7866.
CVE-2018-20425
1Libming
1Libming
Nov 21, 2024
Dec 24, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
libming 0.4.8 has a NULL pointer dereference in the pushdup function of the decompile.c file.
CVE-2018-20364
1Libraw
1Libraw
Nov 21, 2024
Dec 22, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
LibRaw::copy_bayer in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference.
CVE-2018-20363
1Libraw
1Libraw
Nov 21, 2024
Dec 22, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
LibRaw::raw2image in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference.
CVE-2018-20362
1Audiocoding
1Freeware Advanced Audio Decoder 2
Nov 21, 2024
Dec 22, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash because adding to wi...Show more
A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash because adding to windowed output is mishandled in the EIGHT_SHORT_SEQUENCE case.Show less
CVE-2018-20357
1Audiocoding
1Freeware Advanced Audio Decoder 2
Nov 21, 2024
Dec 22, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A NULL pointer dereference was discovered in sbr_process_channel of libfaad/sbr_dec.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash.
CVE-2018-20349
1Igraph
1Igraph
Nov 21, 2024
Dec 22, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
The igraph_i_strdiff function in igraph_trie.c in igraph through 0.7.1 has an NULL pointer dereference that allows attackers to cause a denial of service (application crash) via a crafted object.
CVE-2018-20191
3Canonical
FedoraprojectQemu
3Fedora
QemuUbuntu Linux
Nov 21, 2024
Dec 20, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
hw/rdma/vmw/pvrdma_main.c in QEMU does not implement a read operation (such as uar_read by analogy to uar_write), which allows attackers to cause a denial of service (NULL pointer dereference).
CVE-2018-20125
2Canonical
Qemu
2Qemu
Ubuntu Linux
Nov 21, 2024
Dec 20, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
hw/rdma/vmw/pvrdma_cmd.c in QEMU allows attackers to cause a denial of service (NULL pointer dereference or excessive memory allocation) in create_cq_ring or create_qp_rings.
CVE-2018-1000879
3Fedoraproject
LibarchiveOpensuse
3Fedora
LeapLibarchive
Oct 8, 2026
Dec 20, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards (release v3.3.0 onwards) contains a CWE-476: NULL Pointer Dereference vulnerability in ACL parser - libarchive/archive_acl.c, archive_acl_from_te...Show more
libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards (release v3.3.0 onwards) contains a CWE-476: NULL Pointer Dereference vulnerability in ACL parser - libarchive/archive_acl.c, archive_acl_from_text_l() that can result in Crash/DoS. This attack appear to be exploitable via the victim must open a specially crafted archive file.Show less
CVE-2018-20024
3Canonical
DebianLibvnc Project
3Debian Linux
LibvncserverUbuntu Linux
Nov 21, 2024
Dec 19, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
LibVNC before commit 4a21bbd097ef7c44bb000c3bd0907f96a10e4ce7 contains null pointer dereference in VNC client code that can result DoS.
CVE-2018-20199
2Audiocoding
Debian
2Debian Linux
Freeware Advanced Audio Decoder 2
Nov 21, 2024
Dec 18, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to deni...Show more
A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service because adding to windowed output is mishandled in the ONLY_LONG_SEQUENCE case.Show less
CVE-2018-20198
1Audiocoding
1Freeware Advanced Audio Decoder 2
Nov 21, 2024
Dec 18, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to deni...Show more
A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service because adding to windowed output is mishandled in the LONG_START_SEQUENCE case.Show less
CVE-2018-20195
1Audiocoding
1Freeware Advanced Audio Decoder 2
Nov 21, 2024
Dec 18, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A NULL pointer dereference was discovered in ic_predict of libfaad/ic_predict.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to deni...Show more
A NULL pointer dereference was discovered in ic_predict of libfaad/ic_predict.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.Show less
CVE-2018-20190
1Sass Lang
1Libsass
Nov 21, 2024
Dec 17, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Eval::operator()(Sass::Supports_Operator*) in eval.cpp may cause a Denial of Service (application crash) via a crafted sass input file.
CVE-2018-14853
1Samsung
1Galaxy S6 Firmware
Nov 21, 2024
Dec 17, 2018
N/A· v4
4.3 MEDIUM· v3
3.3 LOW· v2
A NULL pointer dereference in dhd_prot_txdata_write_flush in drivers/net/wireless/bcmdhd4358/dhd_msgbuf.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker (who has obtaine...Show more
A NULL pointer dereference in dhd_prot_txdata_write_flush in drivers/net/wireless/bcmdhd4358/dhd_msgbuf.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker (who has obtained code execution on the Wi-Fi chip) to cause the device to reboot. The Samsung ID is SVE-2018-11783.Show less
CVE-2018-5812
2Canonical
Libraw
2Libraw
Ubuntu Linux
Jun 17, 2026
Dec 7, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An error within the "nikon_coolscan_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to trigger a NULL pointer dereference.