Vulnerabilities > NULL Pointer Dereference

DATE CVE VULNERABILITY TITLE RISK
2018-10-23 CVE-2017-18298 NULL Pointer Dereference vulnerability in Qualcomm products
Lack of Input Validation in SDMX API can lead to NULL pointer access in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660 .
local
low complexity
qualcomm CWE-476
7.8
2018-10-23 CVE-2018-18585 NULL Pointer Dereference vulnerability in multiple products
chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second character (such as the "/\0" name).
4.3
2018-10-18 CVE-2018-18459 NULL Pointer Dereference vulnerability in Xpdfreader Xpdf 4.00
The function DCTStream::getBlock in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted pdf file, as demonstrated by pdftoppm.
local
low complexity
xpdfreader CWE-476
5.5
2018-10-18 CVE-2018-18458 NULL Pointer Dereference vulnerability in Xpdfreader Xpdf 4.00
The function DCTStream::decodeImage in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted pdf file, as demonstrated by pdftoppm.
local
low complexity
xpdfreader CWE-476
5.5
2018-10-18 CVE-2018-18457 NULL Pointer Dereference vulnerability in Xpdfreader Xpdf 4.00
The function DCTStream::readScan in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted pdf file, as demonstrated by pdftoppm.
local
low complexity
xpdfreader CWE-476
5.5
2018-10-17 CVE-2018-17893 NULL Pointer Dereference vulnerability in Lcds Laquis Scada 4.1/4.1.0.3391/4.1.0.3870
LAquis SCADA Versions 4.1.0.3870 and prior has an untrusted pointer dereference vulnerability, which may allow remote code execution.
network
low complexity
lcds CWE-476
critical
9.8
2018-10-17 CVE-2018-2914 NULL Pointer Dereference vulnerability in Oracle Goldengate 12.1.2.1.0/12.2.0.2.0/12.3.0.1.0
Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate (subcomponent: Manager).
network
low complexity
oracle CWE-476
7.5
2018-10-17 CVE-2018-2912 NULL Pointer Dereference vulnerability in Oracle Goldengate 12.1.2.1.0/12.2.0.2.0/12.3.0.1.0
Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate (subcomponent: Manager).
network
low complexity
oracle CWE-476
7.5
2018-10-15 CVE-2018-18318 NULL Pointer Dereference vulnerability in Qiku 360 Mobile Phone N6 PRO Firmware V096
The /dev/block/mmcblk0rpmb driver kernel module on Qiku 360 Phone N6 Pro 1801-A01 devices allows attackers to cause a denial of service (NULL pointer dereference and device crash) via a crafted 0xc0d8b300 ioctl call.
network
low complexity
qiku CWE-476
7.5
2018-10-12 CVE-2018-15937 NULL Pointer Dereference vulnerability in Adobe Acrobat DC
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an untrusted pointer dereference vulnerability.
local
low complexity
adobe CWE-476
7.8