CWE-476 <span class="text-2xl md:text-3xl font-bold ml-2" style="color:var(--text-secondary)">— NULL Pointer Dereference

CVE-2021-44925MEDIUMCVSS 5.5EG 5.5

A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_dump_vrml_dyn_field.isra function, which causes a segmentation fault and application crash.

CVE-2021-44926MEDIUMCVSS 5.5EG 5.5

A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_svg_get_attribute_name function, which causes a segmentation fault and application crash.

CVE-2021-44927MEDIUMCVSS 5.5EG 5.5

A null pointer dereference vulnerability exists in gpac 1.1.0-DEV in the gf_node_get_tag function, which causes a segmentation fault and application crash.

CVE-2021-44960MEDIUMCVSS 6.5EG 6.5

A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_sg_vrml_mf_append function, which causes a segmentation fault and application crash.

2022-02-15

In SVGPP SVG++ library 1.3.0, the XMLDocument::getRoot function in the renderDocument function handled the XMLDocument object improperly, returning a null pointer in advance at the second if, resulting in a null pointer reference behind th…

CVE-2021-44974MEDIUMCVSS 5.5EG 5.5

2022-05-25

radareorg radare2 version 5.5.2 is vulnerable to NULL Pointer Dereference via libr/bin/p/bin_symbols.c binary symbol parser.

CVE-2021-45079CRITICALCVSS 9.1EG 9.1

2022-01-31

In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2) even w…

CVE-2021-45117MEDIUMCVSS 6.5EG 6.5

2022-03-21

The OPC autogenerated ANSI C stack stubs (in the NodeSets) do not handle all error cases. This can lead to a NULL pointer dereference.

CVE-2021-45256MEDIUMCVSS 5.5EG 5.5

CVE-2021-45259MEDIUMCVSS 5.5EG 5.5

A Null Pointer Dereference vulnerability existfs in nasm 2.16rc0 via asm/preproc.c.

CVE-2021-45260MEDIUMCVSS 5.5EG 5.5

An Invalid pointer reference vulnerability exists in gpac 1.1.0 via the gf_svg_node_del function, which causes a segmentation fault and application crash.

CVE-2021-45266HIGHCVSS 7.5EG 7.5

A null pointer dereference vulnerability exists in gpac 1.1.0 in the lsr_read_id.part function, which causes a segmentation fault and application crash.

CVE-2021-45267MEDIUMCVSS 5.5EG 5.5

A null pointer dereference vulnerability exists in gpac 1.1.0 via the lsr_read_anim_values_ex function, which causes a segmentation fault and application crash.

CVE-2021-45292MEDIUMCVSS 5.5EG 5.5

An invalid memory address dereference vulnerability exists in gpac 1.1.0 via the svg_node_start function, which causes a segmentation fault and application crash.

CVE-2021-45340MEDIUMCVSS 6.5EG 6.5

The gf_isom_hint_rtp_read function in GPAC 1.0.1 allows attackers to cause a denial of service (Invalid memory address dereference) via a crafted file in the MP4Box command.

CVE-2021-45343MEDIUMCVSS 5.5EG 5.5

In Libsixel prior to and including v1.10.3, a NULL pointer dereference in the stb_image.h component of libsixel allows attackers to cause a denial of service (DOS) via a crafted PICT file.

CVE-2021-45385MEDIUMCVSS 6.5EG 6.5

In LibreCAD 2.2.0, a NULL pointer dereference in the HATCH handling of libdxfrw allows an attacker to crash the application using a crafted DXF document.

2022-02-11

A Null Pointer Dereference vulnerability exits in ffjpeg d5cfd49 (2021-12-06) in bmp_load(). When the size information in metadata of the bmp is out of range, it returns without assign memory buffer to `pb->pdata` and did not exit the prog…

CVE-2021-45761HIGHCVSS 7.5EG 7.5

CVE-2021-45769HIGHCVSS 7.5EG 7.5

ROPium v3.1 was discovered to contain an invalid memory address dereference via the find() function.

CVE-2021-45773HIGHCVSS 7.5EG 7.5

A NULL pointer dereference in AcseConnection_parseMessage at src/mms/iso_acse/acse.c of libiec61850 v1.5.0 can lead to a segmentation fault or application crash.

CVE-2021-45831MEDIUMCVSS 5.5EG 5.5

A NULL pointer dereference in CS104_IPAddress_setFromString at src/iec60870/cs104/cs104_slave.c of lib60870 commit 0d5e76e can lead to a segmentation fault or application crash.

2022-01-05

A Null Pointer Dereference vulnerability exitgs in GPAC 1.0.1 in MP4Box via __strlen_avx2, which causes a Denial of Service.

CVE-2021-45846MEDIUMCVSS 5.5EG 5.5

CVE-2021-45847MEDIUMCVSS 5.5EG 5.5

A flaw in the AMF parser of Slic3r libslic3r 1.3.0 allows an attacker to cause an application crash using a crafted AMF document, where a metadata tag lacks a "type" attribute.

CVE-2021-46019MEDIUMCVSS 5.5EG 5.5

Several missing input validations in the 3MF parser component of Slic3r libslic3r 1.3.0 can each allow an attacker to cause an application crash using a crafted 3MF input file.

CVE-2021-46038MEDIUMCVSS 5.5EG 5.5

An untrusted pointer dereference in rec_db_destroy() at rec-db.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash.

2022-01-05

A Pointer Dereference vulnerability exists in GPAC 1.0.1 in unlink_chunk.isra, which causes a Denial of Service (context-dependent).

CVE-2021-46039MEDIUMCVSS 5.5EG 5.5

CVE-2021-46040MEDIUMCVSS 5.5EG 5.5

A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the shift_chunk_offsets.part function, which causes a Denial of Service (context-dependent).

CVE-2021-46042MEDIUMCVSS 5.5EG 5.5

A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the finplace_shift_moov_meta_offsets function, which causes a Denial of Servie (context-dependent).

CVE-2021-46043MEDIUMCVSS 5.5EG 5.5

A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the _fseeko function, which causes a Denial of Service.

CVE-2021-46044MEDIUMCVSS 5.5EG 5.5

A Pointer Dereference Vulnerability exits in GPAC 1.0.1 in the gf_list_count function, which causes a Denial of Service.

CVE-2021-46046MEDIUMCVSS 5.5EG 5.5

A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1via ShiftMetaOffset.isra, which causes a Denial of Service (context-dependent).

CVE-2021-46047MEDIUMCVSS 5.5EG 5.5

A Pointer Derefernce Vulnerbility exists GPAC 1.0.1 the gf_isom_box_size function, which could cause a Denial of Service (context-dependent).

CVE-2021-46049MEDIUMCVSS 5.5EG 5.5

A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf_hinter_finalize function.

CVE-2021-46051MEDIUMCVSS 5.5EG 5.5

A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf_fileio_check function, which could cause a Denial of Service.

CVE-2021-46171MEDIUMCVSS 5.5EG 5.5

A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the Media_IsSelfContained function, which could cause a Denial of Service. .

CVE-2021-46234MEDIUMCVSS 5.5EG 5.5

Modex v2.11 was discovered to contain a NULL pointer dereference in set_create_id() at xtract.c.

CVE-2021-46236MEDIUMCVSS 5.5EG 5.5

A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_node_unregister () at scenegraph/base_scenegraph.c. This vulnerability can lead to a Denial of Service (DoS).

CVE-2021-46237MEDIUMCVSS 5.5EG 5.5

A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_sg_vrml_field_pointer_del () at scenegraph/vrml_tools.c. This vulnerability can lead to a Denial of Service (DoS).

CVE-2021-46240MEDIUMCVSS 5.5EG 5.5

An untrusted pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_node_unregister () at scenegraph/base_scenegraph.c. This vulnerability can lead to a Denial of Service (DoS).

CVE-2021-46243MEDIUMCVSS 6.5EG 6.5

A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_dump_vrml_sffield () at scene_manager/scene_dump.c. This vulnerability can lead to a Denial of Service (DoS).

CVE-2021-46311MEDIUMCVSS 5.5EG 5.5

An untrusted pointer dereference vulnerability exists in HDF5 v1.13.1-1 via the function H5O__dtype_decode_helper () at hdf5/src/H5Odtype.c. This vulnerability can lead to a Denial of Service (DoS).