NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

CVEs (5,434)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-11113 2Gnu Invisible Island 2Ncurses Ncurses Jul 23, 2026 Jul 8, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In ncurses 6.0, there is a NULL Pointer Dereference in the _nc_parse_entry function of tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is used to process untrusted ter...Show more In ncurses 6.0, there is a NULL Pointer Dereference in the _nc_parse_entry function of tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is used to process untrusted terminfo data.Show less
CVE-2017-11101 1Swftools 1Swftools May 13, 2026 Jul 7, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 When SWFTools 0.9.2 processes a crafted file in swfcombine, it can lead to a NULL Pointer Dereference in the swf_Relocate() function in lib/modules/swftools.c.
CVE-2017-11100 1Swftools 1Swftools May 13, 2026 Jul 7, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 When SWFTools 0.9.2 processes a crafted file in swfextract, it can lead to a NULL Pointer Dereference in the swf_FoldSprite() function in lib/rxfswf.c.
CVE-2017-11097 1Swftools 1Swftools May 13, 2026 Jul 7, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 When SWFTools 0.9.2 processes a crafted file in swfc, it can lead to a NULL Pointer Dereference in the dict_lookup() function in lib/q.c.
CVE-2017-11096 1Swftools 1Swftools May 13, 2026 Jul 7, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 When SWFTools 0.9.2 processes a crafted file in swfcombine, it can lead to a NULL Pointer Dereference in the swf_DeleteFilter() function in lib/modules/swffilter.c.
CVE-2017-9631 1Schneider Electric 1Wonderware Archestra Logger May 13, 2026 Jul 7, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A Null Pointer Dereference issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. The null pointer dereference vulnerability could allow an attacker to crash the logge...Show more A Null Pointer Dereference issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. The null pointer dereference vulnerability could allow an attacker to crash the logger process, causing a denial of service for logging and log-viewing (applications that use the Wonderware ArchestrA Logger continue to run when the Wonderware ArchestrA Logger service is unavailable).Show less
CVE-2017-10965 1Irssi 1Irssi May 13, 2026 Jul 7, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An issue was discovered in Irssi before 1.0.4. When receiving messages with invalid time stamps, Irssi would try to dereference a NULL pointer.
CVE-2017-0686 1Google 1Android May 13, 2026 Jul 6, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34231231.
CVE-2017-10917 1Xen 1Xen May 13, 2026 Jul 5, 2017 N/A· v4 9.1 CRITICAL· v3 9.4 HIGH· v2 Xen through 4.8.x does not validate the port numbers of polled event channel ports, which allows guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) or possibly obtain sensitive infor...Show more Xen through 4.8.x does not validate the port numbers of polled event channel ports, which allows guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) or possibly obtain sensitive information, aka XSA-221.Show less
CVE-2017-10792 1Gnu 1Pspp May 13, 2026 Jul 2, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 There is a NULL Pointer Dereference in the function ll_insert() of the libpspp library in GNU PSPP before 0.11.0. For example, a crash was observed within the library code when attempting to convert invalid SPSS data int...Show more There is a NULL Pointer Dereference in the function ll_insert() of the libpspp library in GNU PSPP before 0.11.0. For example, a crash was observed within the library code when attempting to convert invalid SPSS data into CSV format. A crafted input will lead to a remote denial of service attack.Show less
CVE-2017-10790 1Gnu 1Libtasn1 May 13, 2026 Jul 2, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input that triggers assignment of a NULL value within an asn1_node structure. It may lead...Show more The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input that triggers assignment of a NULL value within an asn1_node structure. It may lead to a remote denial of service attack.Show less
CVE-2017-9989 2Debian Libming 2Debian Linux Libming May 13, 2026 Jun 28, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 util/outputtxt.c in libming 0.4.8 mishandles memory allocation. A crafted input will lead to a remote denial of service (NULL pointer dereference) attack.
CVE-2017-9988 2Debian Libming 2Debian Linux Libming May 13, 2026 Jun 28, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The readEncUInt30 function in util/read.c in libming 0.4.8 mishandles memory allocation. A crafted input will lead to a remote denial of service (NULL pointer dereference) attack against parser.c.
CVE-2015-5180 2Canonical Gnu 2Glibc Ubuntu Linux May 13, 2026 Jun 27, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 res_query in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash).
CVE-2017-7522 1Openvpn 1Openvpn May 13, 2026 Jun 27, 2017 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service by authenticated remote attacker via sending a certificate with an embedded NULL character.
CVE-2017-7458 1Ntop 1Ntopng May 13, 2026 Jun 26, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The NetworkInterface::getHost function in NetworkInterface.cpp in ntopng before 3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty field that should hav...Show more The NetworkInterface::getHost function in NetworkInterface.cpp in ntopng before 3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty field that should have contained a hostname or IP address.Show less
CVE-2015-9100 1Lame Project 1Lame May 13, 2026 Jun 25, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The fill_buffer_resample function in util.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted audio file.
CVE-2017-3169 1Apache 1Http Server May 13, 2026 Jun 20, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_process_connection() during an HTTP request to an HTTPS port.
CVE-2017-9503 2Debian Qemu 2Debian Linux Qemu May 13, 2026 Jun 16, 2017 N/A· v4 5.5 MEDIUM· v3 1.9 LOW· v2 QEMU (aka Quick Emulator), when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) vi...Show more QEMU (aka Quick Emulator), when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving megasas command processing.Show less
CVE-2017-7507 1Gnu 1Gnutls May 13, 2026 Jun 16, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference while decoding a status response TLS extension with valid contents. This could lead to a crash of the GnuTLS server application.

Previous 1...252253254...272 Next