VYPR

CWE-476

NULL Pointer Dereference

BaseStableLikelihood: Medium

Description

The product dereferences a pointer that it expects to be valid but is NULL.

Hierarchy (View 1000)

Children

none

CVEs mapped to this weakness (5,659)

page 89 of 283
  • CVE-2021-39517MedSep 20, 2021
    risk 0.42cvss 6.5epss 0.01

    An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function BlockBitmapRequester::ReconstructUnsampled() located in blockbitmaprequester.cpp. It allows an attacker to cause Denial of Service.

  • CVE-2021-39516MedSep 20, 2021
    risk 0.42cvss 6.5epss 0.01

    An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function HuffmanDecoder::Get() located in huffmandecoder.hpp. It allows an attacker to cause Denial of Service.

  • CVE-2021-39515MedSep 20, 2021
    risk 0.42cvss 6.5epss 0.01

    An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function SampleInterleavedLSScan::ParseMCU() located in sampleinterleavedlsscan.cpp. It allows an attacker to cause Denial of Service.

  • CVE-2021-35307MedAug 5, 2021
    risk 0.42cvss 6.5epss 0.01

    An issue was discovered in Bento4 through v1.6.0-636. A NULL pointer dereference exists in the AP4_DescriptorFinder::Test component located in /Core/Ap4Descriptor.h. It allows an attacker to cause a denial of service (DOS).

  • CVE-2021-35306MedAug 5, 2021
    risk 0.42cvss 6.5epss 0.01

    An issue was discovered in Bento4 through v1.6.0-636. A NULL pointer dereference exists in the function AP4_StszAtom::WriteFields located in Ap4StszAtom.cpp. It allows an attacker to cause a denial of service (DOS).

  • CVE-2020-20231MedJul 14, 2021
    risk 0.42cvss 6.5epss 0.02

    Mikrotik RouterOs through stable version 6.48.3 suffers from a memory corruption vulnerability in the /nova/bin/detnet process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).

  • CVE-2020-19722MedJul 13, 2021
    risk 0.42cvss 6.5epss 0.01

    An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a direct copy to NULL pointer dereference, leading to a denial of service (DOS).

  • CVE-2020-19720MedJul 13, 2021
    risk 0.42cvss 6.5epss 0.01

    An unhandled memory allocation failure in Core/AP4IkmsAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service (DOS).

  • CVE-2020-19718MedJul 13, 2021
    risk 0.42cvss 6.5epss 0.01

    An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service (DOS).

  • CVE-2020-19717MedJul 13, 2021
    risk 0.42cvss 6.5epss 0.01

    An unhandled memory allocation failure in Core/Ap48bdlAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service (DOS).

  • CVE-2020-20252MedJul 13, 2021
    risk 0.42cvss 6.5epss 0.02

    Mikrotik RouterOs before stable version 6.47 suffers from a memory corruption vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).

  • CVE-2020-20250MedJul 13, 2021
    risk 0.42cvss 6.5epss 0.02

    Mikrotik RouterOs before stable version 6.47 suffers from a memory corruption vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference). NOTE: this is different from CVE-2020-20253 and…

  • CVE-2020-20216MedJul 7, 2021
    risk 0.42cvss 6.5epss 0.02

    Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/graphing process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).

  • CVE-2020-20212MedJul 7, 2021
    risk 0.42cvss 6.5epss 0.02

    Mikrotik RouterOs 6.44.5 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/console process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).

  • CVE-2019-12067MedJun 2, 2021
    risk 0.42cvss 6.5epss 0.00

    The ahci_commit_buf function in ide/ahci.c in QEMU allows attackers to cause a denial of service (NULL dereference) when the command header 'ad->cur_cmd' is null.

  • CVE-2021-3514MedMay 28, 2021
    risk 0.42cvss 6.5epss 0.01

    When using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash.

  • CVE-2021-20196MedMay 26, 2021
    risk 0.42cvss 6.5epss 0.00

    A NULL pointer dereference flaw was found in the floppy disk emulator of QEMU. This issue occurs while processing read/write ioport commands if the selected floppy drive is not initialized with a block device. This flaw allows a privileged guest user to crash the QEMU process on…

  • CVE-2020-20266MedMay 19, 2021
    risk 0.42cvss 6.5epss 0.02

    Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/dot1x process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).

  • CVE-2020-21835MedMay 17, 2021
    risk 0.42cvss 6.5epss 0.01

    A null pointer deference issue exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2337.

  • CVE-2020-21834MedMay 17, 2021
    risk 0.42cvss 6.5epss 0.01

    A null pointer deference issue exists in GNU LibreDWG 0.10 via get_bmp ../../programs/dwgbmp.c:164.