Vulnerabilities > NULL Pointer Dereference

DATE CVE VULNERABILITY TITLE RISK
2021-03-13 CVE-2021-28361 NULL Pointer Dereference vulnerability in Spdk Storage Performance Development KIT
An issue was discovered in Storage Performance Development Kit (SPDK) before 20.01.01.
network
low complexity
spdk CWE-476
7.5
2021-03-12 CVE-2021-28307 NULL Pointer Dereference vulnerability in Fltk Project Fltk
An issue was discovered in the fltk crate before 0.15.3 for Rust.
network
low complexity
fltk-project CWE-476
7.5
2021-03-12 CVE-2021-28306 NULL Pointer Dereference vulnerability in Fltk Project Fltk
An issue was discovered in the fltk crate before 0.15.3 for Rust.
network
low complexity
fltk-project CWE-476
7.5
2021-02-19 CVE-2020-35499 NULL Pointer Dereference vulnerability in Linux Kernel
A NULL pointer dereference flaw in Linux kernel versions prior to 5.11 may be seen if sco_sock_getsockopt function in net/bluetooth/sco.c do not have a sanity check for a socket connection, when using BT_SNDMTU/BT_RCVMTU for SCO sockets.
local
low complexity
linux CWE-476
6.7
2021-02-17 CVE-2020-12364 NULL Pointer Dereference vulnerability in Intel Graphics Drivers
Null pointer reference in some Intel(R) Graphics Drivers for Windows* before version 26.20.100.7212 and before version Linux kernel version 5.5 may allow a privileged user to potentially enable a denial of service via local access.
local
low complexity
intel CWE-476
5.5
2021-02-16 CVE-2021-27203 NULL Pointer Dereference vulnerability in Dekart Private Disk 2.15
In Dekart Private Disk 2.15, invalid use of the Type3 user buffer for IOCTL codes using METHOD_NEITHER results in arbitrary memory dereferencing.
local
low complexity
dekart CWE-476
5.5
2021-02-16 CVE-2021-23841 NULL Pointer Dereference vulnerability in multiple products
The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate.
5.9
2021-02-15 CVE-2021-21702 NULL Pointer Dereference vulnerability in multiple products
In PHP versions 7.3.x below 7.3.27, 7.4.x below 7.4.15 and 8.0.x below 8.0.2, when using SOAP extension to connect to a SOAP server, a malicious SOAP server could return malformed XML data as a response that would cause PHP to access a null pointer and thus cause a crash.
network
low complexity
php debian netapp oracle CWE-476
7.5
2021-02-11 CVE-2021-25690 NULL Pointer Dereference vulnerability in Teradici Pcoip Soft Client 20.07.2
A null pointer dereference in Teradici PCoIP Soft Client versions prior to 20.07.3 could allow an attacker to crash the software.
network
low complexity
teradici CWE-476
7.5
2021-02-10 CVE-2021-27186 NULL Pointer Dereference vulnerability in Treasuredata Fluent BIT 1.6.10
Fluent Bit 1.6.10 has a NULL pointer dereference when an flb_malloc return value is not validated by flb_avro.c or http_server/api/v1/metrics.c.
network
low complexity
treasuredata CWE-476
7.5