← Back
CWE-476

5,434 CVEs • Abstraction: Base • Likelihood of Exploit: Medium

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

JSON object

Loading...

CVEs (5,434)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-6899
1Lineageos
1Lineageos
May 13, 2026
Jun 16, 2017
N/A· v4
6.2 MEDIUM· v3
4.9 MEDIUM· v2
The msm_bus_dbg_update_request_write function in drivers/platform/msm/msm_bus/msm_bus_dbg.c in android_kernel_huawei_msm8916 through 2017-06-16 in LineageOS, and possibly other kernels for MSM devices, allows attackers t...Show more
The msm_bus_dbg_update_request_write function in drivers/platform/msm/msm_bus/msm_bus_dbg.c in android_kernel_huawei_msm8916 through 2017-06-16 in LineageOS, and possibly other kernels for MSM devices, allows attackers to cause a denial of service (NULL pointer dereference and device crash) via a crafted /sys/kernel/debug/msm-bus-dbg/client-data/update-request write request.Show less
CVE-2015-9027
1Google
1Android
May 13, 2026
Jun 13, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM.
CVE-2015-9026
1Google
1Android
May 13, 2026
Jun 13, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM.
CVE-2015-9020
1Google
1Android
May 13, 2026
Jun 13, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in the unlocking of memory.
CVE-2014-9967
1Google
1Android
May 13, 2026
Jun 13, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM.
CVE-2016-5391
2Fedoraproject
Libreswan
2Fedora
Libreswan
May 13, 2026
Jun 13, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
libreswan before 3.18 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto daemon restart).
CVE-2017-9124
1Libquicktime
1Libquicktime
May 13, 2026
Jun 12, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
The quicktime_match_32 function in util.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted mp4 file.
CVE-2014-7919
1Google
1Android
May 13, 2026
Jun 8, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
b/libs/gui/ISurfaceComposer.cpp in Android allows attackers to trigger a denial of service (null pointer dereference and process crash).
CVE-2017-4900
1Vmware
2Workstation Player
Workstation Pro
May 13, 2026
Jun 7, 2017
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
VMware Workstation Pro/Player 12.x before 12.5.3 contains a NULL pointer dereference vulnerability that exists in the SVGA driver. Successful exploitation of this issue may allow attackers with normal user privileges to...Show more
VMware Workstation Pro/Player 12.x before 12.5.3 contains a NULL pointer dereference vulnerability that exists in the SVGA driver. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs.Show less
CVE-2017-9470
1Ytnef Project
1Ytnef
May 13, 2026
Jun 7, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
In ytnef 1.9.2, the MAPIPrint function in lib/ytnef.c allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.
CVE-2017-9468
2Debian
Irssi
2Debian Linux
Irssi
May 13, 2026
Jun 7, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Irssi before 1.0.3, when receiving a DCC message without source nick/host, it attempts to dereference a NULL pointer. Thus, remote IRC servers can cause a crash.
CVE-2014-9949
1Google
1Android
May 13, 2026
Jun 6, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
In TrustZone in all Android releases from CAF using the Linux kernel, an Untrusted Pointer Dereference vulnerability could potentially exist.
CVE-2014-9943
1Google
1Android
May 13, 2026
Jun 6, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
In Core Kernel in all Android releases from CAF using the Linux kernel, a Null Pointer Dereference vulnerability could potentially exist.
CVE-2017-9347
1Wireshark
1Wireshark
May 13, 2026
Jun 2, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Wireshark 2.2.0 to 2.2.6, the ROS dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/asn1/ros/packet-ros-template.c by validating an OID.
CVE-2017-9343
1Wireshark
1Wireshark
May 13, 2026
Jun 2, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the MSNIP dissector misuses a NULL pointer. This was addressed in epan/dissectors/packet-msnip.c by validating an IPv4 address.
CVE-2017-7511
1Freedesktop
1Poppler
May 13, 2026
May 30, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite triggered by specially crafted documents.
CVE-2017-7502
1Mozilla
1Network Security Services
May 13, 2026
May 30, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.
CVE-2017-9250
1Jerryscript
1Jerryscript
May 13, 2026
May 28, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The lexer_process_char_literal function in jerry-core/parser/js/js-lexer.c in JerryScript 1.0 does not skip memory allocation for empty strings, which allows remote attackers to cause a denial of service (NULL pointer de...Show more
The lexer_process_char_literal function in jerry-core/parser/js/js-lexer.c in JerryScript 1.0 does not skip memory allocation for empty strings, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via malformed JavaScript source code, related to the jmem_heap_free_block function.Show less
CVE-2017-8542
1Microsoft
3Forefront Security
Malware Protection EngineWindows Defender
May 13, 2026
May 26, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,...Show more
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to denial of service. aka "Microsoft Malware Protection Engine Denial of Service Vulnerability", a different vulnerability than CVE-2017-8535, CVE-2017-8536, CVE-2017-8537, and CVE-2017-8539.Show less
CVE-2017-8539
1Microsoft
3Forefront Security
Malware Protection EngineWindows Defender
May 13, 2026
May 26, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,...Show more
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to denial of service. aka "Microsoft Malware Protection Engine Denial of Service Vulnerability", a different vulnerability than CVE-2017-8535, CVE-2017-8536, CVE-2017-8537, and CVE-2017-8542.Show less