Vulnerabilities > NULL Pointer Dereference

DATE CVE VULNERABILITY TITLE RISK
2018-09-20 CVE-2018-17282 NULL Pointer Dereference vulnerability in Exiv2 0.26
An issue was discovered in Exiv2 v0.26.
network
low complexity
exiv2 CWE-476
6.5
2018-09-20 CVE-2017-18301 NULL Pointer Dereference vulnerability in Qualcomm products
In Small Cell SoC and Snapdragon (Automobile, Mobile, Wear) in version FSM9055, FSM9955, MDM9607, MDM9640, MDM9650, MSM8909W, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDM630, SDM636, SDM660, SDX20, Snapdragon_High_Med_2016, providing the NULL argument of ICE regulator while processing create key IOCTL results in system restart.
local
low complexity
qualcomm CWE-476
5.5
2018-09-19 CVE-2018-11904 NULL Pointer Dereference vulnerability in Google Android
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, asynchronous callbacks received a pointer to a callers local variable.
local
low complexity
google CWE-476
7.8
2018-09-17 CVE-2018-17142 NULL Pointer Dereference vulnerability in multiple products
The html package (aka x/net/html) through 2018-09-17 in Go mishandles <math><template><mo><template>, leading to a "panic: runtime error" in parseCurrentToken in parse.go during an html.Parse call.
network
low complexity
golang fedoraproject CWE-476
7.5
2018-09-17 CVE-2018-17127 NULL Pointer Dereference vulnerability in Asus Gt-Ac5300 Firmware 3.0.0.4.384.21140/3.0.0.4.384.32738
blocking_request.cgi on ASUS GT-AC5300 devices through 3.0.0.4.384_32738 allows remote attackers to cause a denial of service (NULL pointer dereference and device crash) via a request that lacks a timestap parameter.
network
low complexity
asus CWE-476
7.5
2018-09-16 CVE-2018-17075 NULL Pointer Dereference vulnerability in multiple products
The html package (aka x/net/html) before 2018-07-13 in Go mishandles "in frameset" insertion mode, leading to a "panic: runtime error" for html.Parse of <template><object>, <template><applet>, or <template><marquee>.
network
low complexity
golang fedoraproject CWE-476
7.5
2018-09-16 CVE-2018-17073 NULL Pointer Dereference vulnerability in Bitmap Project Bitmap
wernsey/bitmap before 2018-08-18 allows a NULL pointer dereference via a 4-bit image.
network
low complexity
bitmap-project CWE-476
7.5
2018-09-13 CVE-2018-17000 NULL Pointer Dereference vulnerability in multiple products
A NULL pointer dereference in the function _TIFFmemcmp at tif_unix.c (called from TIFFWriteDirectoryTagTransferfunction) in LibTIFF 4.0.9 allows an attacker to cause a denial-of-service through a crafted tiff file.
network
low complexity
libtiff debian canonical CWE-476
6.5
2018-09-09 CVE-2018-16749 NULL Pointer Dereference vulnerability in multiple products
In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage in coders/png.c allows an attacker to cause a denial of service (WriteBlob assertion failure and application exit) via a crafted file.
network
low complexity
imagemagick canonical debian CWE-476
6.5
2018-09-07 CVE-2018-16657 NULL Pointer Dereference vulnerability in multiple products
In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with an invalid Via header causes a segmentation fault and crashes Kamailio.
network
low complexity
debian kamailio CWE-476
critical
9.8