The vulnerability of the LibTIFF library, related to pointer dereferencing errors, allows attackers to trigger a service failure.

The vulnerability of the LibTIFF library is related to pointer arithmetic errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created TIFF file...

vim code issue vulnerability (CNVD-2022-68089)

Vim is a cross-platform text editor. vim 9.0.0259 previous versions have a code issue vulnerability that stems from NULL pointer dereferencing. No detailed vulnerability details are currently available...

GSD-2022-1003631 ALSA: pcm: Check for null pointer of pointer substream before dereferencing it

ALSA: pcm: Check for null pointer of pointer substream before dereferencing it This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by comm...

GSD-2022-1003120 ALSA: pcm: Check for null pointer of pointer substream before dereferencing it

ALSA: pcm: Check for null pointer of pointer substream before dereferencing it This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commi...

The vulnerabilities of OPC UA data transfer specification implementations in industrial networks, related to pointer dereferencing errors, allow attackers to trigger service failures.

The vulnerability of OPC UA data transmission implementations in industrial networks is related to pointer dereferencing errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

USN-5448-1: ncurses vulnerabilities

It was discovered that ncurses was not properly checking array bounds when executing the fmtentry function, which could result in an out-of-bounds write. An attacker could possibly use this issue to execute arbitrary code. CVE-2017-10684 It was discovered that ncurses was not properly checking us...

Nokogiri Implements libxml2 version vulnerable to null pointer dereferencing

A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest...

ROS-20220516-11

Vim text editor vulnerability is related to NULL pointer dereferencing error in function vimregexecstring in regexp.c. Exploitation of the vulnerability could allow an attacker acting remotely to trick a victim into accessing the Vim text editor. remotely, trick the victim into opening a speciall...

FIS GT.M Denial of Service Vulnerability (CNVD-2022-32801)

FIS GT.M is a database platform. A security vulnerability exists in FIS GT.M versions prior to V7.0-000, which stems from a missing NULL check in the call to iousopen in srunix/iousopen.c. The vulnerability can be exploited to crash an application by dereferencing a NULL pointer. An attacker can...

YottaDB has an unspecified vulnerability (CNVD-2022-31930)

YottaDB is a real-time database from YottaDB, Inc. A security vulnerability exists in YottaDB r1.32 and earlier, which stems from a missing NULL check in the call to emittrip in srport/emitcode.c. An attacker could crash the application by dereferencing the NULL pointer. An attacker could crash t...

Out-of-bounds Read in r_bin_ne_get_entrypoints function

Description Out-of-bounds OOB read vulnerability exists in rbinnegetentrypoints function in Radare2 5.6.7 Version bash radare2 5.6.7 27777 @ linux-x86-64 git.5.6.6 commit: 0c4af43def68ce29f7a74847bb1b7286da155200 build: 2022-04-1008:53:32 Analysis The vulnerability exists due to the invalid type...

The vulnerability of the gf_hinter_finalize function in the MP4Box multimedia platform of GPAC allows a perpetrator to cause a service failure.

The vulnerability of the gfhinterfinalize function in the MP4Box multimedia platform of GPAC is related to pointer dereferencing errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

Autodesk Navisworks Manage PDF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Autodesk Navisworks Manage PDF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Autodesk Navisworks Manage PDF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Autodesk Navisworks Manage PDF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2022-4800 · Libtiff +4 · Libtiff +4

Name of the Vulnerable Software and Affected Versions: libtiff version 4.3.0 Description: The issue is related to errors in pointer dereferencing, allowing a remote attacker to cause a denial-of-service using a specially crafted tiff file. This can be achieved through the tiffcrop function in...

PT-2022-4798 · Libtiff +9 · Libtiff +9

Name of the Vulnerable Software and Affected Versions: libtiff versions 4.0 through 4.3.0 Description: The issue is related to errors in pointer dereferencing in the TIFFReadDirectory function of the LibTIFF library, specifically in the tif dirread.c component. This can be exploited by a remote...

Mageia: Security Advisory (MGASA-2018-0001)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-40418

CVE-2021-40418 affects Blackmagic Design DaVinci Resolve’s R3D DPDecoder service and the R3D SDK. The issue arises when DPDecoder parses a file: it can skip assigning a property that should reference an UUID object parsed from a frame, leaving that member uninitialized. Upon destruction, the unin...