Browse CVEs

CRITICAL 9.8 CVE-2015-9038 In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer may be dereferenced in the front end. Android No fix yet Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2015-9043 In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can be dereferenced upon the expiry of a timer. Android No fix yet Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2015-9054 In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can be dereferenced during GAL decoding. Android Mitigation only Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2014-9972 In all Qualcomm products with Android releases from CAF using the Linux kernel, disabling asserts can potentially cause a NULL pointer dereference du… Android Mitigation only Fix from $2,3002017-08-18 HIGH 7.5 CVE-2017-11185 The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a craf… Strongswan after 5.5.3 Fix from $1,9502017-08-18 MEDIUM 5.5 CVE-2014-0146 The qcow2_open function in the (block/qcow2.c) in QEMU before 1.7.2 and 2.x before 2.0.0 allows local users to cause a denial of service (NULL pointe… Qemu after 1.7.1 Fix from $1,6002017-08-10 MEDIUM 5.5 CVE-2015-3839 The updateMessageStatus function in Android 5.1.1 and earlier allows local users to cause a denial of service (NULL pointer exception and process cra… Android after 5.1.1 Fix from $1,6002017-08-07 HIGH 7.8 CVE-2017-12457 The bfd_make_section_with_flags function in section.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 a… Binutils after 2.29 Fix from $1,9502017-08-04 MEDIUM 5.5 CVE-2017-11550 The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (NULL Pointer Dereference and applic… Libid3tag Mitigation only Fix from $1,6002017-07-31 MEDIUM 5.5 CVE-2017-11333 The vorbis_analysis_wrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (OOM) via a crafte… Libvorbis No fix yet Fix from $1,6002017-07-31 MEDIUM 6.5 CVE-2017-11750 The ReadOneJNGImage function in coders/png.c in ImageMagick 6.9.9-4 and 7.0.6-4 allows remote attackers to cause a denial of service (NULL pointer de… Imagemagick Patch available Fix from $1,6002017-07-30 MEDIUM 5.5 CVE-2017-11733 A null pointer dereference vulnerability was found in the function stackswap (called from decompileSTACKSWAP) in util/decompile.c in Ming 0.4.8, whic… Debian Linux Mitigation only Fix from $1,6002017-07-29 HIGH 7.8 CVE-2017-6252 NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler where a NULL pointer dereference may lead to a denial of … Gpu Driver Mitigation only Fix from $1,9502017-07-28 HIGH 8.8 CVE-2017-6257 NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a NULL pointer dereference may lead to denial of service or… Gpu Driver Mitigation only Fix from $1,9502017-07-28 HIGH 7.5 CVE-2017-7659EPSS 54% A maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2.4.24, 2.4.25 to dereference a NULL pointer and crash the serve… HTTP Server Mitigation only Fix from $1,9502017-07-26 CRITICAL 9.8 CVE-2017-11637 GraphicsMagick 1.3.26 has a NULL pointer dereference in the WritePCLImage() function in coders/pcl.c during writes of monochrome images. Graphicsmagick Mitigation only Fix from $2,3002017-07-26 HIGH 8.8 CVE-2017-11642 GraphicsMagick 1.3.26 has a NULL pointer dereference in the WriteMAPImage() function in coders/map.c when processing a non-colormapped image, a diffe… Graphicsmagick Mitigation only Fix from $1,9502017-07-26 HIGH 7.5 CVE-2017-11590 There is a NULL pointer dereference in the caseless_hash function in gxps-archive.c in libgxps 0.2.5. A crafted input will lead to a remote denial of… Libgxps No fix yet Fix from $1,9502017-07-24 MEDIUM 6.5 CVE-2017-11522 The WriteOnePNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of ser… Imagemagick after 6.9.9-0 Fix from $1,6002017-07-22 HIGH 7.5 CVE-2017-1000050 JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check to see if the image contained at least one c… Fedora Mitigation only Fix from $1,9502017-07-17 MEDIUM 6.5 CVE-2017-11189 unrarlib.c in unrar-free 0.0.1 might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash), which coul… Unrar Free No fix yet Fix from $1,6002017-07-12 CRITICAL 9.8 CVE-2017-11124 libxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_unserialize function in archive.c. Xar Mitigation only Fix from $2,3002017-07-10 CRITICAL 9.8 CVE-2017-11125 libxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_get_path function in util.c. Xar Mitigation only Fix from $2,3002017-07-10 HIGH 7.5 CVE-2017-11113 In ncurses 6.0, there is a NULL Pointer Dereference in the _nc_parse_entry function of tinfo/parse_entry.c. It could lead to a remote denial of servi… Ncurses No fix yet Fix from $1,9502017-07-08 HIGH 8.8 CVE-2017-11096 When SWFTools 0.9.2 processes a crafted file in swfcombine, it can lead to a NULL Pointer Dereference in the swf_DeleteFilter() function in lib/modul… Swftools No fix yet Fix from $1,9502017-07-07 HIGH 8.8 CVE-2017-11097 When SWFTools 0.9.2 processes a crafted file in swfc, it can lead to a NULL Pointer Dereference in the dict_lookup() function in lib/q.c. Swftools No fix yet Fix from $1,9502017-07-07 HIGH 8.8 CVE-2017-11100 When SWFTools 0.9.2 processes a crafted file in swfextract, it can lead to a NULL Pointer Dereference in the swf_FoldSprite() function in lib/rxfswf.… Swftools No fix yet Fix from $1,9502017-07-07 HIGH 8.8 CVE-2017-11101 When SWFTools 0.9.2 processes a crafted file in swfcombine, it can lead to a NULL Pointer Dereference in the swf_Relocate() function in lib/modules/s… Swftools No fix yet Fix from $1,9502017-07-07 HIGH 7.5 CVE-2017-9631 A Null Pointer Dereference issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. The null point… Wonderware Archestra Logger after 2017.426.2307.1 Fix from $1,9502017-07-07 CRITICAL 9.8 CVE-2017-10965 An issue was discovered in Irssi before 1.0.4. When receiving messages with invalid time stamps, Irssi would try to dereference a NULL pointer. Irssi after 1.0.3 Fix from $2,3002017-07-07