Vulnerabilities > NULL Pointer Dereference

DATE CVE VULNERABILITY TITLE RISK
2017-03-23 CVE-2016-8887 NULL Pointer Dereference vulnerability in multiple products
The jp2_colr_destroy function in libjasper/jp2/jp2_cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (NULL pointer dereference).
local
low complexity
jasper-project fedoraproject CWE-476
5.5
2017-03-23 CVE-2016-8885 NULL Pointer Dereference vulnerability in Jasper Project Jasper
The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image.
local
low complexity
jasper-project CWE-476
5.5
2017-03-22 CVE-2017-7225 NULL Pointer Dereference vulnerability in GNU Binutils 2.28
The find_nearest_line function in addr2line in GNU Binutils 2.28 does not handle the case where the main file name and the directory name are both empty, triggering a NULL pointer dereference and an invalid write, and leading to a program crash.
network
low complexity
gnu CWE-476
7.5
2017-03-21 CVE-2017-7209 NULL Pointer Dereference vulnerability in GNU Binutils 2.28
The dump_section_as_bytes function in readelf in GNU Binutils 2.28 accesses a NULL pointer while reading section contents in a corrupt binary, leading to a program crash.
local
low complexity
gnu CWE-476
5.5
2017-03-21 CVE-2017-7207 NULL Pointer Dereference vulnerability in Artifex Ghostscript 9.20
The mem_get_bits_rectangle function in Artifex Software, Inc.
local
low complexity
artifex CWE-476
5.5
2017-03-20 CVE-2017-6178 NULL Pointer Dereference vulnerability in Usbpcap Project Usbpcap 1.1.0.0
The IofCallDriver function in USBPcap 1.1.0.0 allows local users to gain privileges via a crafted 0x00090028 IOCTL call, which triggers a NULL pointer dereference.
local
low complexity
usbpcap-project CWE-476
7.8
2017-03-17 CVE-2017-0016 NULL Pointer Dereference vulnerability in Microsoft products
Microsoft Windows 10 Gold, 1511, and 1607; Windows 8.1; Windows RT 8.1; Windows Server 2012 R2, and Windows Server 2016 do not properly handle certain requests in SMBv2 and SMBv3 packets, which allows remote attackers to execute arbitrary code via a crafted SMBv2 or SMBv3 packet to the Server service, aka "SMBv2/SMBv3 Null Dereference Denial of Service Vulnerability."
network
high complexity
microsoft CWE-476
5.9
2017-03-16 CVE-2017-6951 NULL Pointer Dereference vulnerability in Linux Kernel
The keyring_search_aux function in security/keys/keyring.c in the Linux kernel through 3.14.79 allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a request_key system call for the "dead" type.
local
low complexity
linux CWE-476
5.5
2017-03-15 CVE-2017-5937 NULL Pointer Dereference vulnerability in Virglrenderer Project Virglrenderer 0.2.0/0.4.0/0.5.0
The util_format_is_pure_uint function in vrend_renderer.c in Virgil 3d project (aka virglrenderer) 0.6.0 and earlier allows local guest OS users to cause a denial of service (NULL pointer dereference) via a crafted VIRGL_CCMD_CLEAR command.
local
low complexity
virglrenderer-project CWE-476
6.5
2017-03-15 CVE-2015-8898 NULL Pointer Dereference vulnerability in Imagemagick
The WriteImages function in magick/constitute.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image file.
local
low complexity
imagemagick CWE-476
5.5