Vulnerabilities > NULL Pointer Dereference

DATE CVE VULNERABILITY TITLE RISK
2017-06-06 CVE-2014-9943 NULL Pointer Dereference vulnerability in Google Android
In Core Kernel in all Android releases from CAF using the Linux kernel, a Null Pointer Dereference vulnerability could potentially exist.
network
google CWE-476
critical
9.3
2017-06-02 CVE-2017-9347 NULL Pointer Dereference vulnerability in Wireshark
In Wireshark 2.2.0 to 2.2.6, the ROS dissector could crash with a NULL pointer dereference.
network
low complexity
wireshark CWE-476
7.5
2017-06-02 CVE-2017-9343 NULL Pointer Dereference vulnerability in Wireshark
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the MSNIP dissector misuses a NULL pointer.
network
low complexity
wireshark CWE-476
7.5
2017-05-30 CVE-2017-7511 NULL Pointer Dereference vulnerability in Freedesktop Poppler
poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite triggered by specially crafted documents.
4.3
2017-05-30 CVE-2017-7502 NULL Pointer Dereference vulnerability in Mozilla Network Security Services
Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.
network
low complexity
mozilla CWE-476
7.5
2017-05-28 CVE-2017-9250 NULL Pointer Dereference vulnerability in Jerryscript 1.0
The lexer_process_char_literal function in jerry-core/parser/js/js-lexer.c in JerryScript 1.0 does not skip memory allocation for empty strings, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via malformed JavaScript source code, related to the jmem_heap_free_block function.
network
low complexity
jerryscript CWE-476
5.0
2017-05-24 CVE-2017-9229 NULL Pointer Dereference vulnerability in multiple products
An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5.
network
low complexity
oniguruma-project ruby-lang php CWE-476
5.0
2017-05-24 CVE-2017-9217 NULL Pointer Dereference vulnerability in Systemd Project Systemd
systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS response with an empty question section.
network
low complexity
systemd-project CWE-476
5.0
2017-05-24 CVE-2017-9216 NULL Pointer Dereference vulnerability in multiple products
libjbig2dec.a in Artifex jbig2dec 0.13, as used in MuPDF and Ghostscript, has a NULL pointer dereference in the jbig2_huffman_get function in jbig2_huffman.c.
4.3
2017-05-23 CVE-2017-9211 NULL Pointer Dereference vulnerability in Linux Kernel
The crypto_skcipher_init_tfm function in crypto/skcipher.c in the Linux kernel through 4.11.2 relies on a setkey function that lacks a key-size check, which allows local users to cause a denial of service (NULL pointer dereference) via a crafted application.
local
low complexity
linux CWE-476
4.9