← Back
CWE-476

5,434 CVEs • Abstraction: Base • Likelihood of Exploit: Medium

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

JSON object

Loading...

CVEs (5,434)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-6847
1Podofo Project
1Podofo
May 13, 2026
Mar 15, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
CVE-2017-6846
1Podofo Project
1Podofo
May 13, 2026
Mar 15, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The GraphicsStack::TGraphicsStackElement::SetNonStrokingColorSpace function in graphicsstack.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
CVE-2017-6845
1Podofo Project
1Podofo
May 13, 2026
Mar 15, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The PoDoFo::PdfColor::operator function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
CVE-2017-6842
1Podofo Project
1Podofo
May 13, 2026
Mar 15, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
CVE-2017-6841
1Podofo Project
1Podofo
May 13, 2026
Mar 15, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The GraphicsStack::TGraphicsStackElement::~TGraphicsStackElement function in graphicsstack.h in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
CVE-2017-6210
1Virglrenderer Project
1Virglrenderer
May 13, 2026
Mar 15, 2017
N/A· v4
6.5 MEDIUM· v3
2.1 LOW· v2
The vrend_decode_reset function in vrend_decode.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (NULL pointer dereference and QEMU process crash) by destroying context 0 (zero).
CVE-2016-10250
1Jasper Project
1Jasper
May 13, 2026
Mar 15, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The jp2_colr_destroy function in jp2_cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service (NULL pointer dereference) by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vu...Show more
The jp2_colr_destroy function in jp2_cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service (NULL pointer dereference) by leveraging incorrect cleanup of JP2 box data on error. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8887.Show less
CVE-2016-10248
1Jasper Project
1Jasper
May 13, 2026
Mar 15, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The jpc_tsfb_synthesize function in jpc_tsfb.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereference) via vectors involving an empty sequence.
CVE-2017-5668
1Bitlbee
2Bitlbee
Bitlbee Libpurple
May 13, 2026
Mar 14, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
bitlbee-libpurple before 3.5.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a file transfer request for a contact that is not in the co...Show more
bitlbee-libpurple before 3.5.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-10189.Show less
CVE-2016-10189
1Bitlbee
2Bitlbee
Bitlbee Libpurple
May 13, 2026
Mar 14, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
BitlBee before 3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list.
CVE-2017-6311
2Fedoraproject
Gnome
2Fedora
Gdk Pixbuf
May 13, 2026
Mar 10, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
gdk-pixbuf-thumbnailer.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to printing an error message.
CVE-2016-6350
1Openbsd
1Openbsd
May 13, 2026
Mar 7, 2017
N/A· v4
5.5 MEDIUM· v3
4.9 MEDIUM· v2
OpenBSD 5.8 and 5.9 allows local users to cause a denial of service (NULL pointer dereference and panic) via a sysctl call with a path starting with 10,9.
CVE-2017-6501
1Imagemagick
1Imagemagick
May 13, 2026
Mar 6, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in ImageMagick 6.9.7. A specially crafted xcf file could lead to a NULL pointer dereference.
CVE-2017-6497
1Imagemagick
1Imagemagick
May 13, 2026
Mar 6, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in ImageMagick 6.9.7. A specially crafted psd file could lead to a NULL pointer dereference (thus, a DoS).
CVE-2017-5193
2Debian
Irssi
2Debian Linux
Irssi
May 13, 2026
Mar 3, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The nickcmp function in Irssi before 0.8.21 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a message without a nick.
CVE-2017-6415
1Radare
1Radare2
May 13, 2026
Mar 2, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The dex_parse_debug_item function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted DEX file.
CVE-2017-5980
1Gdraheim
1Zziplib
May 13, 2026
Mar 1, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted ZIP file.
CVE-2017-5979
1Gdraheim
1Zziplib
May 13, 2026
Mar 1, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The prescan_entry function in fseeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted ZIP file.
CVE-2017-5855
1Podofo Project
1Podofo
May 13, 2026
Mar 1, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
CVE-2017-5854
1Podofo Project
1Podofo
May 13, 2026
Mar 1, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
base/PdfOutputStream.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file.