CWE-476

Medium likelihood

NULL Pointer Dereference

Parent: CWE-710 - Improper Adherence to Coding Standards

The product dereferences a pointer that it expects to be valid but is NULL.

5,326 vulnerabilities with CWE-476
CVE-2017-14504 MEDIUM
GraphicsMagick 1.3.26 - Buffer Overflow
CVSS 6.5
CVE-2017-4925 MEDIUM
VMware ESXi <6.5, <6.0, <5.5 - Memory Corruption
CVSS 5.5
CVE-2017-14340 MEDIUM
Linux Kernel < 4.13.2 - Denial of Service via XFS Real-Time Inode Flag Handling
CVSS 5.5
CVE-2017-14406 MEDIUM
MP3Gain 1.5.2 - Denial of Service via NULL Pointer Dereference in sync_buffer
CVSS 5.5
CVE-2017-14400 MEDIUM
ImageMagick 7.0.7-1 - Denial of Service via Crafted File
CVSS 6.5
CVE-2017-14318 MEDIUM
Xen 4.5.x-4.9.x - Privilege Escalation
CVSS 6.5
CVE-2017-14228 MEDIUM
Netwide Assembler (NASM) 2.14rc0 - DoS
CVSS 5.5
CVE-2017-14225 HIGH
FFmpeg 3.3.3 - NULL Pointer Dereference in av_color_primaries_name
CVSS 8.8
CVE-2017-14181 HIGH
aacplusenc 0.17.5 - Denial of Service via Crafted WAV File
CVSS 7.8
CVE-2017-12476 MEDIUM
bento4 < 1.5.0-615 - Denial of Service via Crafted MP4 File
CVSS 5.5
CVE-2017-12475 MEDIUM
Bento4 < 1.5.0-615 - Denial of Service via Crafted MP4 File
CVSS 5.5
CVE-2017-12474 MEDIUM
bento4 < 1.5.0-615 - Denial of Service via Crafted MP4 File
CVSS 5.5
CVE-2017-14149 HIGH
GoAhead 3.4.0-3.6.5 - NULL Pointer Dereference in websDecodeUrl
CVSS 7.5
CVE-2017-14121 MEDIUM
unrar 0.0.1 - Null Pointer Dereference
CVSS 5.5
CVE-2017-14060 MEDIUM
ImageMagick 7.0.6-10 - Denial of Service via Malformed Image File
CVSS 6.5
CVE-2017-13768 MEDIUM
ImageMagick < 6.9.9-11 - Denial of Service via Null Pointer Dereference in IdentifyImage
CVSS 6.5
CVE-2017-13764 HIGH
Wireshark 2.4.0 - Denial of Service via Modbus Dissector NULL Pointer Dereference
CVSS 7.5
CVE-2017-13712 HIGH
LAME 3.99.5 - Denial of Service via NULL Pointer Dereference in id3v2AddAudioDuration
CVSS 7.5
CVE-2017-12952 MEDIUM
libgig 4.0.0 - Denial of Service via Crafted GIG File
CVSS 6.5
CVE-2017-12950 MEDIUM
libgig 4.0.0 - Denial of Service via Crafted GIG File
CVSS 6.5
CVE-2017-12923 MEDIUM
libfpx 1.3.1_p6 - Denial of Service via Crafted FPX Image
CVSS 6.5
CVE-2017-12922 MEDIUM
libfpx 1.3.1_p6 - Denial of Service via NULL Pointer Dereference in wchar.c
CVSS 6.5
CVE-2017-12921 MEDIUM
libfpx 1.3.1_p6 - Denial of Service via Crafted FPX Image
CVSS 6.5
CVE-2017-12920 MEDIUM
libfpx 1.3.1_p6 - Denial of Service via Crafted FPX Image
CVSS 6.5
CVE-2017-13710 HIGH
GNU Binutils 2.29 - Denial of Service via Malformed Group Section in BFD Library
CVSS 7.5
Details
Vulnerabilities 5,326
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits