Browse CVEs

MEDIUM 5.5 CVE-2019-16349 Bento4 1.5.1-628 has a NULL pointer dereference in AP4_ByteStream::ReadUI32 in Core/Ap4ByteStream.cpp when called from the AP4_TrunAtom class. Bento4 No fix yet Fix from $1,6002019-09-16 MEDIUM 6.5 CVE-2019-16350 ffjpeg before 2019-08-18 has a NULL pointer dereference in idct2d8x8() at dct.c. Ffjpeg 2019-08-18+ Fix from $1,6002019-09-16 MEDIUM 6.5 CVE-2019-16351 ffjpeg before 2019-08-18 has a NULL pointer dereference in huffman_decode_step() at huffman.c. Ffjpeg 2019-08-18+ Fix from $1,6002019-09-16 MEDIUM 6.5 CVE-2018-21015 AVC_DuplicateConfig() at isomedia/avc_ext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (NULL pointer dereference and applicat… Debian Linux No fix yet Fix from $1,6002019-09-16 MEDIUM 6.5 CVE-2019-16348 marc-q libwav through 2017-04-20 has a NULL pointer dereference in gain_file() at wav_gain.c. Libwav after 2017-04-20 Fix from $1,6002019-09-16 HIGH 7.5 CVE-2019-5054 An exploitable denial-of-service vulnerability exists in the session handling functionality of the NETGEAR N300 (WNR2000v5 with Firmware Version V1.0… Wnr2000 Firmware No fix yet Fix from $1,9502019-09-11 HIGH 7.5 CVE-2019-5055 An exploitable denial-of-service vulnerability exists in the Host Access Point Daemon (hostapd) on the NETGEAR N300 (WNR2000v5 with Firmware Version … Wnr2000 Firmware No fix yet Fix from $1,9502019-09-11 MEDIUM 6.5 CVE-2019-15297 res_pjsip_t38 in Sangoma Asterisk 15.x before 15.7.4 and 16.x before 16.5.1 allows an attacker to trigger a crash by sending a declined stream in a r… Asterisk after 16.5.0 Fix from $1,6002019-09-09 HIGH 7.5 CVE-2019-16161 Onigmo through 6.2.0 has a NULL pointer dereference in onig_error_code_to_str because of fetch_token in regparse.c. Onigmo after 6.2.0 Fix from $1,9502019-09-09 MEDIUM 6.5 CVE-2019-16164 MyHTML through 4.0.5 has a NULL pointer dereference in myhtml_tree_node_remove in tree.c. Myhtml after 4.0.5 Fix from $1,6002019-09-09 CRITICAL 9.8 CVE-2019-16092 Symonics libmysofa 0.7 has a NULL pointer dereference in getHrtf in hrtf/reader.c. Ubuntu Linux Patch available Fix from $2,3002019-09-08 MEDIUM 5.5 CVE-2019-15922 An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a pf data structure if alloc_disk fails in drivers/… Linux Kernel 5.0.9+ Fix from $1,6002019-09-04 MEDIUM 5.5 CVE-2019-15923 An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a cd data structure if alloc_disk fails in drivers/… Linux Kernel 5.0.9+ Fix from $1,6002019-09-04 MEDIUM 5.5 CVE-2019-15924 An issue was discovered in the Linux kernel before 5.0.11. fm10k_init_module in drivers/net/ethernet/intel/fm10k/fm10k_main.c has a NULL pointer dere… Linux Kernel 5.0.11+ Fix from $1,6002019-09-04 MEDIUM 5.5 CVE-2019-15860 Xpdf 2.00 allows a SIGSEGV in XRef::constructXRef in XRef.cc. NOTE: 2.00 is a version from November 2002. Xpdfreader No fix yet Fix from $1,6002019-09-03 MEDIUM 5.5 CVE-2019-14534 In VideoLAN VLC media player 3.0.7.1, there is a NULL pointer dereference at the function SeekPercent of demux/asf/asf.c that will lead to a denial o… Debian Linux Patch available Fix from $1,6002019-08-29 MEDIUM 6.5 CVE-2019-15759 An issue was discovered in Binaryen 1.38.32. Two visitors in ir/ExpressionManipulator.cpp can lead to a NULL pointer dereference in wasm::LocalSet::f… Binaryen 89+ Fix from $1,6002019-08-29 MEDIUM 6.5 CVE-2019-15757 libMirage 3.2.2 in CDemu has a NULL pointer dereference in the NRG parser in parser.c. Libmirage Patch available Fix from $1,6002019-08-29 HIGH 7.5 CVE-2019-1900 A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to cause the web se… Unified Computing System 4.0+ Fix from $1,9502019-08-21 HIGH 7.5 CVE-2019-15099 drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descr… Linux Kernel 4.14.157 / 4.19.87+ Fix from $1,9502019-08-16 MEDIUM 5.5 CVE-2019-13219 A NULL pointer dereference in the get_window function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service by opening a c… Debian Linux after 2019-03-04 Fix from $1,6002019-08-15 MEDIUM 5.5 CVE-2019-10140 A vulnerability was found in Linux kernel's, versions up to 3.10, implementation of overlayfs. An attacker with local access can create a denial of s… Linux Kernel after 3.10 Fix from $1,6002019-08-15 HIGH 7.5 CVE-2019-12259EPSS 16% Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. There is an IPNET security vulnerability: DoS … Vxworks 2.2.1 / 6.9.4.12+ Fix from $1,9502019-08-09 HIGH 7.5 CVE-2019-14493 An issue was discovered in OpenCV before 4.1.1. There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persiste… Debian Linux 4.1.1+ Fix from $1,9502019-08-01 HIGH 7.5 CVE-2018-16871 A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mount an exp… Linux Kernel after 4.20 Fix from $1,9502019-07-30 HIGH 7.5 CVE-2019-14381 libopenmpt before 0.4.3 allows a crash due to a NULL pointer dereference when doing a portamento from an OPL instrument to an empty instrument note m… Libopenmpt 0.4.3+ Fix from $1,9502019-07-30 HIGH 7.5 CVE-2019-2334 Null pointer dereferencing can happen when playing the clip with wrong block group id in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT… Mdm9150 Firmware Mitigation only Fix from $1,9502019-07-25 MEDIUM 5.5 CVE-2019-2236 Null pointer dereference during secure application termination using specific application ids. in Snapdragon Auto, Snapdragon Compute, Snapdragon Con… Ipq8074 Firmware Mitigation only Fix from $1,6002019-07-25 MEDIUM 5.5 CVE-2019-14248 In libnasm.a in Netwide Assembler (NASM) 2.14.xx, asm/pragma.c allows a NULL pointer dereference in process_pragma, search_pragma_list, and nasm_set_… Netwide Assembler after 2.14.02 Fix from $1,6002019-07-24 MEDIUM 5.5 CVE-2019-1010162 jsish 2.4.74 2.0474 is affected by: CWE-476: NULL Pointer Dereference. The impact is: denial of service. The component is: function Jsi_StrcmpDict (j… Jsish Patch available Fix from $1,6002019-07-23