Vulnerabilities (CVE)

Filtered by CWE-476
Total 3510 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-20190 1 Sass-lang 1 Libsass 2019-07-23 4.3 MEDIUM 6.5 MEDIUM
In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Eval::operator()(Sass::Supports_Operator*) in eval.cpp may cause a Denial of Service (application crash) via a crafted sass input file.
CVE-2019-14212 2 Foxitsoftware, Microsoft 2 Phantompdf, Windows 2019-07-22 5.0 MEDIUM 7.5 HIGH
An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash when calling certain XFA JavaScript due to the use of, or access to, a NULL pointer without proper validation on the object.
CVE-2019-14208 2 Foxitsoftware, Microsoft 2 Phantompdf, Windows 2019-07-22 5.0 MEDIUM 7.5 HIGH
An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to a NULL pointer dereference and crash when getting a PDF object from a document, or parsing a certain portfolio that contains a null dictionary.
CVE-2019-12175 1 Zeek 1 Zeek 2019-07-22 5.0 MEDIUM 7.5 HIGH
In Zeek Network Security Monitor (formerly known as Bro) before 2.6.2, a NULL pointer dereference in the Kerberos (aka KRB) protocol parser leads to DoS because a case-type index is mishandled.
CVE-2018-14332 1 Clementine-player 1 Clementine 2019-07-21 1.9 LOW 5.5 MEDIUM
An issue was discovered in Clementine Music Player 1.3.1. Clementine.exe is vulnerable to a user mode write access violation due to a NULL pointer dereference in the Init call in the MoodbarPipeline::NewPadCallback function in moodbar/moodbarpipeline.cpp. The vulnerability is triggered when the user opens a malformed mp3 file.
CVE-2019-13959 1 Axiosys 1 Bento4 2019-07-19 4.3 MEDIUM 6.5 MEDIUM
In Bento4 1.5.1-627, AP4_DataBuffer::SetDataSize does not handle reallocation failures, leading to a memory copy into a NULL pointer. This is different from CVE-2018-20186.
CVE-2018-1000027 3 Canonical, Debian, Squid-cache 3 Ubuntu Linux, Debian Linux, Squid 2019-07-17 5.0 MEDIUM 7.5 HIGH
The Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a NULL Pointer Dereference vulnerability in HTTP Response X-Forwarded-For header processing that can result in Denial of Service to all clients of the proxy. This attack appear to be exploitable via Remote HTTP server responding with an X-Forwarded-For header to certain types of HTTP request. This vulnerability appears to have been fixed in 4.0.23 and later.
CVE-2019-13032 1 Flightcrew Project 1 Flightcrew 2019-07-15 4.3 MEDIUM 5.5 MEDIUM
An issue was discovered in FlightCrew v0.9.2 and earlier. A NULL pointer dereference occurs in GetRelativePathToNcx() or GetRelativePathsToXhtmlDocuments() when a NULL pointer is passed to xc::XMLUri::isValidURI(). This affects third-party software (not Sigil) that uses FlightCrew as a library.
CVE-2018-12648 1 Exempi Project 1 Exempi 2019-06-27 4.3 MEDIUM 7.5 HIGH
The WEBP::GetLE32 function in XMPFiles/source/FormatSupport/WEBP_Support.hpp in Exempi 2.4.5 has a NULL pointer dereference.
CVE-2018-15733 1 Stopzilla 1 Antimalware 2019-06-21 2.1 LOW 5.5 MEDIUM
An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a NULL Pointer Dereference vulnerability due to not validating the size of the output buffer value from IOCtl 0x80002028.
CVE-2019-12818 1 Linux 1 Linux Kernel 2019-06-18 5.0 MEDIUM 7.5 HIGH
An issue was discovered in the Linux kernel before 4.20.15. The nfc_llcp_build_tlv function in net/nfc/llcp_commands.c may return NULL. If the caller does not check for this, it will trigger a NULL pointer dereference. This will cause denial of service. This affects nfc_llcp_build_gb in net/nfc/llcp_core.c.
CVE-2018-20014 1 Urbackup 1 Urbackup 2019-06-10 5.0 MEDIUM 7.5 HIGH
In UrBackup 2.2.6, an attacker can send a malformed request to the client over the network, and trigger a fileservplugin/CClientThread.cpp CClientThread::GetFileHashAndMetadata NULL pointer dereference, leading to shutting down the client application.
CVE-2018-19432 2 Debian, Libsndfile Project 2 Debian Linux, Libsndfile 2019-06-10 4.3 MEDIUM 6.5 MEDIUM
An issue was discovered in libsndfile 1.0.28. There is a NULL pointer dereference in the function sf_write_int in sndfile.c, which will lead to a denial of service.
CVE-2018-9190 1 Fortinet 1 Forticlient 2019-06-03 4.9 MEDIUM 5.5 MEDIUM
A null pointer dereference vulnerability in Fortinet FortiClientWindows 6.0.2 and earlier allows attacker to cause a denial of service via the NDIS miniport driver.
CVE-2018-7191 1 Linux 1 Linux Kernel 2019-05-31 4.9 MEDIUM 5.5 MEDIUM
In the tun subsystem in the Linux kernel before 4.13.14, dev_get_valid_name is not called before register_netdevice. This allows local users to cause a denial of service (NULL pointer dereference and panic) via an ioctl(TUNSETIFF) call with a dev name containing a / character. This is similar to CVE-2013-4343.
CVE-2016-4959 1 Nvidia 40 Geforce 910m, Geforce 920m, Geforce 920mx and 37 more 2019-05-30 7.8 HIGH 7.5 HIGH
For the NVIDIA Quadro, NVS, and GeForce products, there is a Remote Desktop denial of service. A successful exploit of a vulnerable system will result in a kernel null pointer dereference, causing a blue screen crash.
CVE-2019-8357 1 Sound Exchange Project 1 Sound Exchange 2019-05-28 4.3 MEDIUM 5.5 MEDIUM
An issue was discovered in SoX 14.4.2. lsx_make_lpf in effect_i_dsp.c allows a NULL pointer dereference.
CVE-2016-7550 1 Digium 1 Asterisk 2019-05-24 5.0 MEDIUM 7.5 HIGH
asterisk 13.10.0 is affected by: denial of service issues in asterisk. The impact is: cause a denial of service (remote).
CVE-2018-20363 1 Libraw 1 Libraw 2019-05-21 4.3 MEDIUM 6.5 MEDIUM
LibRaw::raw2image in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference.
CVE-2018-20364 1 Libraw 1 Libraw 2019-05-21 4.3 MEDIUM 6.5 MEDIUM
LibRaw::copy_bayer in libraw_cxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference.