Null Pointer Reference Vulnerability in Thunderbolt Video

Xunlei Video is a media player under Xunlei, which was officially renamed Xunlei Look Player after the launch of version 3.0. A null pointer reference vulnerability exists in Xunlei Video when opening certain MP4 files. An attacker can exploit the vulnerability to cause a denial of service,...

Bento4 AP4_HdlrAtom Class Null Pointer Reference Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in the AP4HdlrAtom class in Bento4 version 1.5.0-617. A remote attacker can exploit this vulnerability to cause a denial of service null pointer backreference, segmentation error, and applicati...

CVE-2017-14624

ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function PostscriptDelegateMessage in coders/ps.c...

Null Pointer Reference Vulnerability in WPS Forms (CNVD-2017-30610)

WPS Office is an office software suite developed independently by Kingsoft Corporation. A null pointer reference vulnerability exists in formset.exe in WPS when parsing a specific xls file, which can be exploited by an attacker to cause a denial of service or lead to code execution...

ESXi 6.0 < Build 5485776 Multiple Vulnerabilities (VMSA-2017-0015) (remote check)

The version of the remote VMware ESXi 6.0 host is prior to build 5224529. It is, therefore, affected by multiple vulnerabilities in VMWare Tools and the bundled OpenSSL and Python packages, as well as a NULL pointer dereference vulnerability related to handling RPC requests that could allow an...

WPS Presentation Null Pointer Reference Vulnerability

WPS Office is an office software suite developed independently by Kingsoft Corporation. WPS Presentation wpp.exe in WPS has a null pointer reference vulnerability when parsing a specific ppt file, which can be exploited by an attacker to cause a denial of service...

CVE-2017-12678

In TagLib 1.11.1, the rebuildAggregateFrames function in id3v2framefactory.cpp has a pointer to cast vulnerability, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted audio file...

CVE-2017-13065

GraphicsMagick 1.3.26 has a NULL pointer dereference vulnerability in the function SVGStartElement in coders/svg.c...

CVE-2017-9680

CVE-2017-9680 affects Qualcomm components used in Android CAF builds running the Linux kernel. The issue occurs when a pointer argument from userspace is invalid, and a driver may use an uninitialized structure to log an error message. The connected documents confirm the affected stack is Qualcom...

Null pointer dereference

In all Qualcomm products with Android releases from CAF using the Linux kernel, an audio client pointer is dereferenced before being checked if it is valid...

Kernel pool overflow exploit combat of Windows 10-bug warning-the black bar safety net

One, Foreword This is the kernel pool overflow exploit combat of Windows 7 throughout the sequel, we will be in the Windows 10 system to achieve the same exploits, it will be more challenging because of Microsoft ever since Windows 8 has taken a lot for the kernel pool attacks defenses. This...

CVE-2017-10965

An issue was discovered in Irssi before 1.0.4. When receiving messages with invalid time stamps, Irssi would try to dereference a NULL pointer...

Null pointer dereference

In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM...

CVE-2015-9027

In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM...

CVE-2015-9027

In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM...

CVE-2015-9000

In TrustZone an untrusted pointer dereference vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel...

Design/Logic Flaw

An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before 2.1.7, and 2.4.x before 2.4.2. A specially crafted x509 certificate, when parsed by mbed TLS library, can cause an invalid free of a stack pointer leading to ...

CVE-2017-2784

An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before 2.1.7, and 2.4.x before 2.4.2. A specially crafted x509 certificate, when parsed by mbed TLS library, can cause an invalid free of a stack pointer leading to ...

CVE-2017-2784

An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before 2.1.7, and 2.4.x before 2.4.2. A specially crafted x509 certificate, when parsed by mbed TLS library, can cause an invalid free of a stack pointer leading to ...

PoDoFo 'PoDoFo::PdfXObject::PdfXObject' function null pointer reference denial of service vulnerability

PoDoFo is an open source , written in C++ using the PDF file format library . A null pointer reference vulnerability exists in PoDoFo's 'PoDoFo::PdfXObject::PdfXObject' function. Allows a remote attacker to construct a malicious file and trick the user into parsing it, which can crash the...