VYPR

CWE-476

NULL Pointer Dereference

BaseStableLikelihood: Medium

Description

The product dereferences a pointer that it expects to be valid but is NULL.

Hierarchy (View 1000)

Children

none

CVEs mapped to this weakness (5,530)

page 52 of 277
  • CVE-2020-5597HigJul 7, 2020
    risk 0.49cvss 7.5epss 0.02

    TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model) contains a null pointer dereference vulnerability, which may allow a remote attacker to stop the network…

  • CVE-2020-14149HigJun 15, 2020
    risk 0.49cvss 7.5epss 0.02

    In uftpd before 2.12, handle_CWD in ftpcmd.c mishandled the path provided by the user, causing a NULL pointer dereference and denial of service, as demonstrated by a CWD /.. command.

  • CVE-2019-20829HigJun 4, 2020
    risk 0.49cvss 7.5epss 0.02

    An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a NULL pointer dereference via FXSYS_wcslen in an Epub file.

  • CVE-2019-20826HigJun 4, 2020
    risk 0.49cvss 7.5epss 0.02

    An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It has a NULL pointer dereference.

  • CVE-2019-20824HigJun 4, 2020
    risk 0.49cvss 7.5epss 0.02

    An issue was discovered in Foxit PhantomPDF before 8.3.11. It has a NULL pointer dereference via FXSYS_wcslen in an Epub file.

  • CVE-2018-21236HigJun 4, 2020
    risk 0.49cvss 7.5epss 0.01

    An issue was discovered in Foxit Reader before 2.4.4. It has a NULL pointer dereference.

  • CVE-2019-20821HigJun 4, 2020
    risk 0.49cvss 7.5epss 0.02

    An issue was discovered in Foxit PhantomPDF Mac before 3.4. It has a NULL pointer dereference.

  • CVE-2019-20820HigJun 4, 2020
    risk 0.49cvss 7.5epss 0.02

    An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference during the parsing of file data.

  • CVE-2019-20817HigJun 4, 2020
    risk 0.49cvss 7.5epss 0.02

    An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference.

  • CVE-2019-20816HigJun 4, 2020
    risk 0.49cvss 7.5epss 0.02

    An issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference during the parsing of file data.

  • CVE-2019-20813HigJun 4, 2020
    risk 0.49cvss 7.5epss 0.02

    An issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference.

  • CVE-2020-10957HigMay 18, 2020
    risk 0.49cvss 7.5epss 0.07

    In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Dereference and crash in submission-login, submission, or lmtp.

  • CVE-2020-10664HigApr 27, 2020
    risk 0.49cvss 7.5epss 0.01

    The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference.

  • CVE-2020-12059HigApr 22, 2020
    risk 0.49cvss 7.5epss 0.03

    An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can crash the RGW process by triggering a NULL pointer exception.

  • CVE-2019-14012HigApr 16, 2020
    risk 0.49cvss 7.5epss 0.01

    Possibility of null pointer deference as the array of video codecs from media info is referenced without null checking while processing SDP messages in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…

  • CVE-2017-18664HigApr 7, 2020
    risk 0.49cvss 7.5epss 0.00

    An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) software. There is a NULL pointer exception in PersonManager, causing memory corruption. The Samsung ID is SVE-2017-8286 (June 2017).

  • CVE-2016-11039HigApr 7, 2020
    risk 0.49cvss 7.5epss 0.01

    An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) (AP + CP MDM9x35, or Qualcomm Onechip) software. There is a NULL pointer dereference issue in the IPC socket code. The Samsung ID is SVE-2016-5980 (July 2016).

  • CVE-2020-10231HigApr 1, 2020
    risk 0.49cvss 7.5epss 0.04

    TP-Link NC200 through 2.1.8_Build_171109, NC210 through 1.0.9_Build_171214, NC220 through 1.3.0_Build_180105, NC230 through 1.3.0_Build_171205, NC250 through 1.3.0_Build_171205, NC260 through 1.5.1_Build_190805, and NC450 through 1.5.0_Build_181022 devices allow a remote NULL…

  • CVE-2019-20603HigMar 24, 2020
    risk 0.49cvss 7.5epss 0.01

    An issue was discovered on Samsung mobile devices with N(7.x), O(8.0), and P(9.0) (Qualcomm chipsets) software. The ESECOMM Trustlet has a NULL pointer dereference. The Samsung ID is SVE-2019-13950 (May 2019).

  • CVE-2019-20602HigMar 24, 2020
    risk 0.49cvss 7.5epss 0.01

    An issue was discovered on Samsung mobile devices with N(7.x), O(8.0), and P(9.0) (Qualcomm chipsets) software. The Authnr Trustlet has a NULL pointer dereference. The Samsung ID is SVE-2019-13949 (May 2019).