Vulnerabilities (CVE)

Filtered by CWE-476
Total 2549 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-47022 1 Open-mpi 1 Hwloc 2023-09-06 N/A 4.7 MEDIUM
An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c.
CVE-2023-4683 1 Gpac 1 Gpac 2023-09-06 N/A 5.5 MEDIUM
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3-DEV.
CVE-2023-41633 1 Catdoc Project 1 Catdoc 2023-09-06 N/A 5.5 MEDIUM
Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/fileutil.c.
CVE-2023-4681 1 Gpac 1 Gpac 2023-09-05 N/A 5.5 MEDIUM
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3-DEV.
CVE-2022-35206 1 Gnu 1 Binutils 2023-08-31 N/A 5.5 MEDIUM
Null pointer dereference vulnerability in Binutils readelf 2.38.50 via function read_and_display_attr_value in file dwarf.c.
CVE-2023-36199 1 Skale 1 Sgxwallet 2023-08-29 N/A 7.5 HIGH
An issue in skalenetwork sgxwallet v.1.9.0 and below allows an attacker to cause a denial of service via the trustedGenerateEcdsaKey component.
CVE-2023-38665 1 Nasm 1 Netwide Assembler 2023-08-26 N/A 5.5 MEDIUM
Null pointer dereference in ieee_write_file in nasm 2.16rc0 allows attackers to cause a denial of service (crash).
CVE-2020-18378 1 Webassembly 1 Binaryen 2023-08-25 N/A 6.5 MEDIUM
A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-as.
CVE-2021-40264 1 Freeimage Project 1 Freeimage 2023-08-25 N/A 6.5 MEDIUM
NULL pointer dereference vulnerability in FreeImage before 1.18.0 via the FreeImage_CloneTag function inFreeImageTag.cpp.
CVE-2023-39669 1 Dlink 2 Dir-880l A1, Dir-880l A1 Firmware 2023-08-25 N/A 7.5 HIGH
D-Link DIR-880 A1_FW107WWb08 was discovered to contain a NULL pointer dereference in the function FUN_00010824.
CVE-2022-28070 1 Radare 1 Radare2 2023-08-24 N/A 7.5 HIGH
A null pointer deference in __core_anal_fcn function in radare2 5.4.2 and 5.4.0.
CVE-2021-45385 1 Rockcarry 1 Ffjpeg 2023-08-17 4.3 MEDIUM 6.5 MEDIUM
A Null Pointer Dereference vulnerability exits in ffjpeg d5cfd49 (2021-12-06) in bmp_load(). When the size information in metadata of the bmp is out of range, it returns without assign memory buffer to `pb->pdata` and did not exit the program. So the program crashes when it tries to access the pb->data, in jfif_encode() at jfif.c:763. This is due to the incomplete patch for CVE-2020-13438.
CVE-2019-16351 1 Rockcarry 1 Ffjpeg 2023-08-17 4.3 MEDIUM 6.5 MEDIUM
ffjpeg before 2019-08-18 has a NULL pointer dereference in huffman_decode_step() at huffman.c.
CVE-2019-16350 1 Rockcarry 1 Ffjpeg 2023-08-17 4.3 MEDIUM 6.5 MEDIUM
ffjpeg before 2019-08-18 has a NULL pointer dereference in idct2d8x8() at dct.c.
CVE-2021-34122 1 Rockcarry 1 Ffjpeg 2023-08-17 4.3 MEDIUM 5.5 MEDIUM
The function bitstr_tell at bitstr.c in ffjpeg commit 4ab404e has a NULL pointer dereference.
CVE-2019-19887 1 Rockcarry 1 Ffjpeg 2023-08-17 4.3 MEDIUM 6.5 MEDIUM
bitstr_tell at bitstr.c in ffjpeg through 2019-08-21 has a NULL pointer dereference related to jfif_encode.
CVE-2023-39397 1 Huawei 2 Emui, Harmonyos 2023-08-17 N/A 7.5 HIGH
Input parameter verification vulnerability in the communication system. Successful exploitation of this vulnerability may affect availability.
CVE-2020-36024 1 Freedesktop 1 Poppler 2023-08-17 N/A 5.5 MEDIUM
An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::convertToType1 function.
CVE-2020-24187 1 Jerryscript 1 Jerryscript 2023-08-16 N/A 5.5 MEDIUM
An issue was discovered in ecma-helpers.c in jerryscript version 2.3.0, allows local attackers to cause a denial of service (DoS) (Null Pointer Dereference).
CVE-2020-36138 1 Ffmpeg 1 Ffmpeg 2023-08-16 N/A 7.5 HIGH
An issue was discovered in decode_frame in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service (DoS).