Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
null pointer vulnerabilities and exploits
(subscribe to this query)
6.5
CVSSv3
CVE-2019-14875
In the __multiply function of the newlib libc library, all versions before 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate a big integer, however no check is performed to verify if the allocation succeeded or not. The access of _x[0] will trigger a null pointer...
Newlib Project Newlib
6.5
CVSSv3
CVE-2019-14876
In the __lshift function of the newlib libc library, all versions before 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate a big integer, however no check is performed to verify if the allocation succeeded or not. The access to b1 will trigger a null pointer dere...
Newlib Project Newlib
6.5
CVSSv3
CVE-2019-14877
In the __mdiff function of the newlib libc library, all versions before 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate big integers, however no check is performed to verify if the allocation succeeded or not. The access to _wds and _sign will trigger a null po...
Newlib Project Newlib
6.5
CVSSv3
CVE-2019-14878
In the __d2b function of the newlib libc library, all versions before 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate a big integer, however no check is performed to verify if the allocation succeeded or not. Accessing _x will trigger a null pointer dereference...
Newlib Project Newlib
4 Github repositories
5.5
CVSSv3
CVE-2017-16711
The swf_DefineLosslessBitsTagToImage function in lib/modules/swfbits.c in SWFTools 0.9.2 mishandles an uncompress failure, which allows remote malicious users to cause a denial of service (NULL pointer dereference and application crash) because of extractDefinitions in lib/reader...
Swftools Swftools 0.9.2
NA
CVE-2007-0228
The DataCollector service in EIQ Networks Network Security Analyzer allows remote malicious users to cause a denial of service (service crash) via a (1) &CONNECTSERVER& (2) &ADDENTRY& (3) &FIN& (4) &START& (5) &LOGPATH& (6) &FWADELTA&am...
Eiqnetworks Enterprise Security Analyzer 2.1
Eiqnetworks Enterprise Security Analyzer 2.5
Eiqnetworks Enterprise Security Analyzer 2.0
1 EDB exploit
7.5
CVSSv3
CVE-2013-4412
slim has NULL pointer dereference when using crypt() method from glibc 2.17
Berlios Slim
Debian Debian Linux 7.0
Debian Debian Linux 6.0
7.8
CVSSv3
CVE-2010-4210
The pfs_getextattr function in FreeBSD 7.x prior to 7.3-RELEASE and 8.x prior to 8.0-RC1 unlocks a mutex that was not previously locked, which allows local users to cause a denial of service (kernel panic), overwrite arbitrary memory locations, and possibly execute arbitrary code...
Freebsd Freebsd
Freebsd Freebsd 8.0
1 EDB exploit
6.5
CVSSv3
CVE-2019-14872
The _dtoa_r function of the newlib libc library, prior to version 3.3.0, performs multiple memory allocations without checking their return value. This could result in NULL pointer dereference.
Newlib Project Newlib
7.8
CVSSv3
CVE-2017-6060
Stack-based buffer overflow in jstest_main.c in mujstest in Artifex Software, Inc. MuPDF 1.10a allows remote malicious users to have unspecified impact via a crafted image.
Artifex Mupdf 1.10a
Debian Debian Linux 9.0
1 EDB exploit
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
bypass
open redirect
CVE-2024-4358
CVE-2024-24199
CVE-2024-5550
CVE-2024-5305
CVE-2024-30373
CVE-2024-1800
deserialization
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
NEXT »