← Back
CWE-476

5,859 CVEs • Abstraction: Base • Likelihood of Exploit: Medium

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

JSON object

Loading...

CVEs (5,859)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-16517
1Nasm
1Netwide Assembler
Nov 21, 2024
Sep 6, 2018
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
asm/labels.c in Netwide Assembler (NASM) is prone to NULL Pointer Dereference, which allows the attacker to cause a denial of service via a crafted file.
CVE-2018-1000800
1Zephyrproject
1Zephyr
Nov 21, 2024
Sep 6, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sys_ring_buf_put(), sys_ring_buf_get() that can result in CPU Page Fault (error code 0x00000010). This attack appear to be exploitable vi...Show more
zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sys_ring_buf_put(), sys_ring_buf_get() that can result in CPU Page Fault (error code 0x00000010). This attack appear to be exploitable via a malicious application call the vulnerable kernel APIs (system sys_ring_buf_get() and sys_ring_buf_put).Show less
CVE-2018-1000661
1Jsish
1Jsish
Nov 21, 2024
Sep 6, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
jsish version 2.4.67 contains a CWE-476: NULL Pointer Dereference vulnerability in Jsi_LogMsg (jsiUtils.c:196) that can result in Crash due to segmentation fault. This attack appear to be exploitable via the victim execu...Show more
jsish version 2.4.67 contains a CWE-476: NULL Pointer Dereference vulnerability in Jsi_LogMsg (jsiUtils.c:196) that can result in Crash due to segmentation fault. This attack appear to be exploitable via the victim executing specially crafted javascript code. This vulnerability appears to have been fixed in 2.4.69.Show less
CVE-2018-10914
4Debian
GlusterOpensuse+1 more
5Debian Linux
Enterprise Linux ServerGlusterfs+2 more
Nov 21, 2024
Sep 4, 2018
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
It was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster brick process to crash which will result in a remote denial of service. If gluster multiplexing is enabled this will result in...Show more
It was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster brick process to crash which will result in a remote denial of service. If gluster multiplexing is enabled this will result in a crash of multiple bricks and gluster volumes.Show less
CVE-2018-16428
2Canonical
Gnome
2Glib
Ubuntu Linux
Nov 21, 2024
Sep 4, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference.
CVE-2018-16329
1Imagemagick
1Imagemagick
Nov 21, 2024
Sep 1, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
In ImageMagick before 7.0.8-8, a NULL pointer dereference exists in the GetMagickProperty function in MagickCore/property.c.
CVE-2018-16328
1Imagemagick
1Imagemagick
Nov 21, 2024
Sep 1, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
In ImageMagick before 7.0.8-8, a NULL pointer dereference exists in the CheckEventLogging function in MagickCore/log.c.
CVE-2018-12799
1Adobe
2Acrobat Dc
Acrobat Reader Dc
Nov 21, 2024
Aug 29, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Adobe Acrobat and Reader versions 2018.011.20055 and earlier, 2017.011.30096 and earlier, and 2015.006.30434 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrar...Show more
Adobe Acrobat and Reader versions 2018.011.20055 and earlier, 2017.011.30096 and earlier, and 2015.006.30434 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution.Show less
CVE-2018-15864
2Canonical
Xkbcommon
3Libxkbcommon
Ubuntu LinuxXkbcommon
Nov 21, 2024
Aug 25, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
Unchecked NULL pointer usage in resolve_keysym in xkbcomp/parser.y in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, b...Show more
Unchecked NULL pointer usage in resolve_keysym in xkbcomp/parser.y in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because a map access attempt can occur for a map that was never created.Show less
CVE-2018-15863
2Canonical
Xkbcommon
3Libxkbcommon
Ubuntu LinuxXkbcommon
Nov 21, 2024
Aug 25, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
Unchecked NULL pointer usage in ResolveStateAndPredicate in xkbcomp/compat.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keym...Show more
Unchecked NULL pointer usage in ResolveStateAndPredicate in xkbcomp/compat.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file with a no-op modmask expression.Show less
CVE-2018-15862
2Canonical
Xkbcommon
3Libxkbcommon
Ubuntu LinuxXkbcommon
Nov 21, 2024
Aug 25, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
Unchecked NULL pointer usage in LookupModMask in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file with...Show more
Unchecked NULL pointer usage in LookupModMask in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file with invalid virtual modifiers.Show less
CVE-2018-15861
2Canonical
Xkbcommon
3Libxkbcommon
Ubuntu LinuxXkbcommon
Nov 21, 2024
Aug 25, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file that...Show more
Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file that triggers an xkb_intern_atom failure.Show less
CVE-2018-15859
2Canonical
Xkbcommon
3Libxkbcommon
Ubuntu LinuxXkbcommon
Nov 21, 2024
Aug 25, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
Unchecked NULL pointer usage when parsing invalid atoms in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying...Show more
Unchecked NULL pointer usage when parsing invalid atoms in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because lookup failures are mishandled.Show less
CVE-2018-15858
2Canonical
Xkbcommon
3Libxkbcommon
Ubuntu LinuxXkbcommon
Nov 21, 2024
Aug 25, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
Unchecked NULL pointer usage when handling invalid aliases in CopyKeyAliasesToKeymap in xkbcomp/keycodes.c in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon pars...Show more
Unchecked NULL pointer usage when handling invalid aliases in CopyKeyAliasesToKeymap in xkbcomp/keycodes.c in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file.Show less
CVE-2018-15855
2Canonical
Xkbcommon Project
2Ubuntu Linux
Xkbcommon
Nov 21, 2024
Aug 25, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because the XkbFile for an xkb_geometry...Show more
Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because the XkbFile for an xkb_geometry section was mishandled.Show less
CVE-2018-15854
2Canonical
Xkbcommon Project
2Ubuntu Linux
Xkbcommon
Nov 21, 2024
Aug 25, 2018
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because geometry tokens were desupporte...Show more
Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because geometry tokens were desupported incorrectly.Show less
CVE-2017-2635
1Redhat
1Libvirt
Nov 21, 2024
Aug 22, 2018
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
A NULL pointer deference flaw was found in the way libvirt from 2.5.0 to 3.0.0 handled empty drives. A remote authenticated attacker could use this flaw to crash libvirtd daemon resulting in denial of service.
CVE-2017-2575
1Libbpg Project
1Libbpg
Nov 21, 2024
Aug 22, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A vulnerability was found while fuzzing libbpg 0.9.7. It is a NULL pointer dereference issue due to missing check of the return value of function malloc in the BPG encoder. This vulnerability appeared while converting a...Show more
A vulnerability was found while fuzzing libbpg 0.9.7. It is a NULL pointer dereference issue due to missing check of the return value of function malloc in the BPG encoder. This vulnerability appeared while converting a malicious JPEG file to BPG.Show less
CVE-2018-10918
2Canonical
Samba
2Samba
Ubuntu Linux
Nov 21, 2024
Aug 22, 2018
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
A null pointer dereference flaw was found in the way samba checked database outputs from the LDB database layer. An authenticated attacker could use this flaw to crash a samba server in an Active Directory Domain Control...Show more
A null pointer dereference flaw was found in the way samba checked database outputs from the LDB database layer. An authenticated attacker could use this flaw to crash a samba server in an Active Directory Domain Controller configuration. Samba versions before 4.7.9 and 4.8.4 are vulnerable.Show less
CVE-2018-1000655
1Jsish
1Jsish
Nov 21, 2024
Aug 20, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Jsish version 2.4.65 contains a CWE-476: NULL Pointer Dereference vulnerability in Function jsi_ValueCopyMove from jsiValue.c:240 that can result in Crash due to segmentation fault. This attack appear to be exploitable v...Show more
Jsish version 2.4.65 contains a CWE-476: NULL Pointer Dereference vulnerability in Function jsi_ValueCopyMove from jsiValue.c:240 that can result in Crash due to segmentation fault. This attack appear to be exploitable via a crafted javascript code. This vulnerability appears to have been fixed in 2.4.67.Show less