NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

CVEs (5,859)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-19395 1Php 1Php Nov 21, 2024 Nov 20, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 ext/standard/var.c in PHP 5.x through 7.1.24 on Windows allows attackers to cause a denial of service (NULL pointer dereference and application crash) because com and com_safearray_proxy return NULL in com_properties_get...Show more ext/standard/var.c in PHP 5.x through 7.1.24 on Windows allows attackers to cause a denial of service (NULL pointer dereference and application crash) because com and com_safearray_proxy return NULL in com_properties_get in ext/com_dotnet/com_handlers.c, as demonstrated by a serialize call on COM("WScript.Shell").Show less
CVE-2018-7361 1Zte 1Zxhn F670 Firmware Jun 17, 2026 Nov 16, 2018 N/A· v4 6.5 MEDIUM· v3 3.3 LOW· v2 All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by null pointer dereference vulnerability, which may allows an attacker to cause a denial of service via appviahttp service.
CVE-2018-19217 2Gnu Invisible Island 2Ncurses Ncurses Jul 23, 2026 Nov 12, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 In ncurses, possibly a 6.x version, there is a NULL pointer dereference at the function _nc_name_match that will lead to a denial of service attack. NOTE: the original report stated version 6.1, but the issue did not rep...Show more In ncurses, possibly a 6.x version, there is a NULL pointer dereference at the function _nc_name_match that will lead to a denial of service attack. NOTE: the original report stated version 6.1, but the issue did not reproduce for that version according to the maintainer or a reliable third-partyShow less
CVE-2018-19211 2Gnu Invisible Island 2Ncurses Ncurses Jul 23, 2026 Nov 12, 2018 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will lead to a denial of service attack. The product proceeds to the dereference code path even after a "dubious chara...Show more In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will lead to a denial of service attack. The product proceeds to the dereference code path even after a "dubious character `*' in name or alias field" detection.Show less
CVE-2018-19210 3Canonical DebianLibtiff 3Debian Linux LibtiffUbuntu Linux Nov 21, 2024 Nov 12, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 In LibTIFF 4.0.9, there is a NULL pointer dereference in the TIFFWriteDirectorySec function in tif_dirwrite.c that will lead to a denial of service attack, as demonstrated by tiffset.
CVE-2018-19209 1Nasm 1Netwide Assembler Nov 21, 2024 Nov 12, 2018 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Netwide Assembler (NASM) 2.14rc15 has a NULL pointer dereference in the function find_label in asm/labels.c that will lead to a DoS attack.
CVE-2018-19208 3Libwpd Project RedhatSuse 3Enterprise Linux LibwpdSuse Linux Enterprise Server Nov 21, 2024 Nov 12, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 In libwpd 0.10.2, there is a NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp that will lead to a denial of service attack. This is related to WPXTable.h.
CVE-2018-19200 2Debian Uriparser Project 2Debian Linux Uriparser Nov 21, 2024 Nov 12, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in uriparser before 0.9.0. UriCommon.c allows attempted operations on NULL input via a uriResetUri* function.
CVE-2018-19184 1Ethereum 1Go Ethereum Nov 21, 2024 Nov 12, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 cmd/evm/runner.go in Go Ethereum (aka geth) 1.8.17 allows attackers to cause a denial of service (SEGV) via crafted bytecode.
CVE-2018-19149 2Canonical Freedesktop 2Poppler Ubuntu Linux Nov 21, 2024 Nov 10, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Poppler before 0.70.0 has a NULL pointer dereference in _poppler_attachment_new when called from poppler_annot_file_attachment_get_attachment.
CVE-2018-19129 1Libav 1Libav Nov 21, 2024 Nov 9, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 In Libav 12.3, a NULL pointer dereference (RIP points to zero) issue in ff_mpa_synth_filter_float in libavcodec/mpegaudiodsp_template.c can cause a segmentation fault (application crash) via a crafted mov file.
CVE-2018-19122 1Mz Automation 1Libiec61850 Nov 21, 2024 Nov 9, 2018 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 An issue has been found in libIEC61850 v1.3. It is a NULL pointer dereference in Ethernet_sendPacket in ethernet_bsd.c.
CVE-2018-19121 1Mz Automation 1Libiec61850 Nov 21, 2024 Nov 9, 2018 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 An issue has been found in libIEC61850 v1.3. It is a SEGV in Ethernet_receivePacket in ethernet_bsd.c.
CVE-2018-19060 2Canonical Freedesktop 2Poppler Ubuntu Linux Nov 21, 2024 Nov 7, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in Poppler 0.71.0. There is a NULL pointer dereference in goo/GooString.h, will lead to denial of service, as demonstrated by utils/pdfdetach.cc not validating a filename of an embedded file befor...Show more An issue was discovered in Poppler 0.71.0. There is a NULL pointer dereference in goo/GooString.h, will lead to denial of service, as demonstrated by utils/pdfdetach.cc not validating a filename of an embedded file before constructing a save path.Show less
CVE-2018-18937 1Mz Automation 1Libiec61850 Nov 21, 2024 Nov 5, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue has been found in libIEC61850 v1.3. It is a NULL pointer dereference in ClientDataSet_getValues in client/ied_connection.c.
CVE-2018-18883 1Xen 1Xen Nov 21, 2024 Nov 1, 2018 N/A· v4 8.8 HIGH· v3 7.2 HIGH· v2 An issue was discovered in Xen 4.9.x through 4.11.x, on Intel x86 platforms, allowing x86 HVM and PVH guests to cause a host OS denial of service (NULL pointer dereference) or possibly have unspecified other impact becau...Show more An issue was discovered in Xen 4.9.x through 4.11.x, on Intel x86 platforms, allowing x86 HVM and PVH guests to cause a host OS denial of service (NULL pointer dereference) or possibly have unspecified other impact because nested VT-x is not properly restricted.Show less
CVE-2018-18873 4Canonical DebianJasper Project+1 more 5Debian Linux JasperLinux Enterprise Desktop+2 more Nov 21, 2024 Oct 31, 2018 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function ras_putdatastd in ras/ras_enc.c.
CVE-2018-18829 1Libav 1Libav Nov 21, 2024 Oct 30, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 There exists a NULL pointer dereference in ff_vc1_parse_frame_header_adv in vc1.c in Libav 12.3, which allows attackers to cause a denial-of-service through a crafted aac file.
CVE-2018-18661 2Canonical Libtiff 2Libtiff Ubuntu Linux Nov 21, 2024 Oct 26, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in LibTIFF 4.0.9. There is a NULL pointer dereference in the function LZWDecode in the file tif_lzw.c.
CVE-2018-18607 3Debian GnuNetapp 3Binutils Data OntapDebian Linux Nov 21, 2024 Oct 23, 2018 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in elf_link_input_bfd in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. There is a NULL pointer dereference in elf_link_input_bfd when use...Show more An issue was discovered in elf_link_input_bfd in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. There is a NULL pointer dereference in elf_link_input_bfd when used for finding STT_TLS symbols without any TLS section. A specially crafted ELF allows remote attackers to cause a denial of service, as demonstrated by ld.Show less

Previous 1...251252253...293 Next