Browse CVEs

HIGH 7.8 CVE-2017-9692 When an atomic commit is issued on a writeback panel with a NULL output_layer parameter in Android for MSM, Firefox OS for MSM, and QRD Android befor… Android Patch available Fix from $1,9502018-03-30 HIGH 7.8 CVE-2017-15846 In the video_ioctl2() function in the camera driver in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-09-16, an untrusted pointer d… Android Patch available Fix from $1,9502018-03-30 MEDIUM 5.5 CVE-2018-9151 A NULL pointer dereference bug in the function ObReferenceObjectByHandle in the Kingsoft Internet Security 9+ kernel driver KWatch3.sys allows local … Internet Security 9 Plus Mitigation only Fix from $1,6002018-03-30 MEDIUM 6.5 CVE-2018-9132 libming 0.4.8 has a NULL pointer dereference in the getInt function of the decompile.c file. Remote attackers could leverage this vulnerability to ca… Debian Linux No fix yet Fix from $1,6002018-03-30 MEDIUM 6.5 CVE-2017-18250 An issue was discovered in ImageMagick 7.0.7. A NULL pointer dereference vulnerability was found in the function LogOpenCLBuildFailure in MagickCore/… Imagemagick Patch available Fix from $1,6002018-03-27 MEDIUM 6.5 CVE-2017-18253 An issue was discovered in ImageMagick 7.0.7. A NULL pointer dereference vulnerability was found in the function LoadOpenCLDevices in MagickCore/open… Imagemagick Patch available Fix from $1,6002018-03-27 MEDIUM 5.9 CVE-2018-1302EPSS 13% When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2.4.30 could have written a NULL pointer potentially… HTTP Server after 2.4.29 Fix from $1,6002018-03-26 MEDIUM 6.5 CVE-2017-18247 The av_audio_fifo_size function in libavutil/audio_fifo.c in Libav 12.2 allows remote attackers to cause a denial of service (NULL pointer dereferenc… Libav Mitigation only Fix from $1,6002018-03-23 MEDIUM 5.3 CVE-2018-7525 In Omron CX-Supervisor Versions 3.30 and prior, processing a malformed packet by a certain executable may cause an untrusted pointer dereference vuln… Cx Supervisor after 3.30 Fix from $1,6002018-03-21 MEDIUM 5.5 CVE-2017-18241 fs/f2fs/segment.c in the Linux kernel before 4.13 allows local users to cause a denial of service (NULL pointer dereference and panic) by using a nof… Linux Kernel 4.13+ Fix from $1,6002018-03-21 HIGH 7.5 CVE-2018-7262 In Ceph before 12.2.3 and 13.x through 13.0.1, the rgw_civetweb.cc RGWCivetWeb::init_env function in radosgw doesn't handle malformed HTTP headers pr… Ceph 12.2.3+ Fix from $1,9502018-03-19 HIGH 7.5 CVE-2018-8740EPSS 8% In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to bu… SQLite after 3.22.0 Fix from $1,9502018-03-17 HIGH 7.8 CVE-2017-15833 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, untrusted pointer dereference in upda… Android Patch available Fix from $1,9502018-03-16 MEDIUM 5.5 CVE-2017-18237 An issue was discovered in Exempi before 2.4.3. The PostScript_Support::ConvertToDate function in XMPFiles/source/FormatSupport/PostScript_Support.cp… Exempi 2.4.3+ Fix from $1,6002018-03-15 HIGH 7.5 CVE-2018-1000121EPSS 9% A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker to cause a denial of service Debian Linux 7.2+ Fix from $1,9502018-03-14 MEDIUM 6.5 CVE-2017-18230 An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadCINEONImage in coders/cineon… Debian Linux Patch available Fix from $1,6002018-03-14 MEDIUM 6.5 CVE-2017-18231 An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadEnhMetaFile in coders/emf.c,… Debian Linux Patch available Fix from $1,6002018-03-14 MEDIUM 6.5 CVE-2016-9600 JasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded creation of JPEG 2000 image files. A specially craf… Ubuntu Linux 2.0.10+ Fix from $1,6002018-03-12 MEDIUM 5.5 CVE-2018-8043 The unimac_mdio_probe function in drivers/net/phy/mdio-bcm-unimac.c in the Linux kernel through 4.15.8 does not validate certain resource availabilit… Linux Kernel after 4.15.8 Fix from $1,6002018-03-10 HIGH 7.5 CVE-2018-7998 In libvips before 8.6.3, a NULL function pointer dereference vulnerability was found in the vips_region_generate function in region.c, which allows r… Debian Linux 8.6.3+ Fix from $1,9502018-03-09 HIGH 8.8 CVE-2018-7999 In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during a dumbRendering operation, which may al… Graphite2 Patch available Fix from $1,9502018-03-09 MEDIUM 6.5 CVE-2018-7870 An invalid memory address dereference was discovered in getString in util/decompile.c in libming 0.4.8 for CONSTANT16 data. The vulnerability causes … Debian Linux No fix yet Fix from $1,6002018-03-08 MEDIUM 6.5 CVE-2018-7872 An invalid memory address dereference was discovered in the function getName in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segment… Debian Linux No fix yet Fix from $1,6002018-03-08 MEDIUM 6.5 CVE-2018-7866 A NULL pointer dereference was discovered in newVar3 in util/decompile.c in libming 0.4.8. The vulnerability causes a segmentation fault and applicat… Debian Linux No fix yet Fix from $1,6002018-03-08 MEDIUM 5.5 CVE-2018-7731 An issue was discovered in Exempi through 2.4.4. XMPFiles/source/FormatSupport/WEBP_Support.cpp does not check whether a bitstream has a NULL value, … Ubuntu Linux after 2.4.4 Fix from $1,6002018-03-06 MEDIUM 5.5 CVE-2017-17133 Huawei VP9660 V500R002C10 has a null pointer reference vulnerability in license module due to insufficient verification. An authenticated local attac… Vp9660 Firmware Mitigation only Fix from $1,6002018-03-05 MEDIUM 5.5 CVE-2017-17134 XML parser in Huawei DP300 V500R002C00; RP200 V500R002C00SPC200; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C… Dp300 Firmware Mitigation only Fix from $1,6002018-03-05 MEDIUM 5.5 CVE-2017-17135 PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; … Dp300 Firmware Mitigation only Fix from $1,6002018-03-05 MEDIUM 5.5 CVE-2017-18216 In fs/ocfs2/cluster/nodemanager.c in the Linux kernel before 4.15, local users can cause a denial of service (NULL pointer dereference and BUG) becau… Linux Kernel 4.15+ Fix from $1,6002018-03-05 MEDIUM 6.5 CVE-2018-5449 A NULL Pointer Dereference issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. The application does not check… Oncell G3150 Hspa T Firmware after 1.4 Fix from $1,6002018-03-05