MGASA-2022-0453 Updated libarchive packages fix security vulnerability

In libarchive 3.6.1, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference. CVE-2022-36227...

PT-2022-36045 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.9 Description: The issue is related to a NULL pointer dereference in the can rx register function. This problem was introduced in version v5.12 and is fixed in Linux Kernel version v6.0.9. The actual impact...

PT-2022-36203 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.79 Description: The issue concerns a NULL pointer dereference in the can rx register function. This problem was introduced in version v5.12 and is fixed in Linux Kernel version v5.15.79. The actual impact...

PT-2022-36148 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.80 Description: The issue is related to a potential null pointer dereference in the kprobe event gen test exit function. This could potentially lead to security vulnerabilities, although the actual impact...

PT-2022-36516 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v4.19.257 through v4.19.264 Description: The issue is related to a NULL pointer dereference in the rose send frame function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

CVE-2022-3606 Linux Kernel BPF libbpf.c find_prog_by_sec_insn null pointer dereference

A vulnerability was found in Linux Kernel. It has been classified as problematic. This affects the function findprogbysecinsn of the file tools/lib/bpf/libbpf.c of the component BPF. The manipulation leads to null pointer dereference. It is recommended to apply a patch to fix this issue. The...

CVE-2022-38928

XPDF 4.04 is vulnerable to Null Pointer Dereference in FoFiType1C.cc:2393...

PT-2022-24618 · Xpdf +1 · Xpdf +1

Name of the Vulnerable Software and Affected Versions: XPDF version 4.04 Description: The issue is related to a Null Pointer Dereference in the FoFiType1C.cc file at line 2393. This is a general information about the problem, but specific details about the estimated number of potentially affected...

PT-2022-25534 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 versions 1.6.0-639 and earlier Description: An issue was discovered in Bento4, where a NULL pointer dereference occurs in the AP4 StszAtom::WriteFields function. Recommendations: For Bento4 versions 1.6.0-639 and earlier, as a temporar...

MGASA-2022-0331 Updated python-lxml packages fix security vulnerability

NULL pointer dereference due to state leak between parser runs CVE-2022-2309...

PT-2022-33389 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.17 through v5.19.3 Description: A NULL pointer dereference issue was found in the iavf get link ksettings function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in...

PT-2022-25500 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 versions 1.6.0-639 and earlier Description: An issue was discovered that leads to a NULL pointer dereference in AP4 DescriptorListWriter::Action in Core/Ap4Descriptor.h. This issue is called from AP4 EsDescriptor::WriteFields and AP4...

NULL Pointer Dereference

net-snmp is vulnerable to null pointer dereference. The vulnerability exists when a malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable which allows an attacker to cause a null pointer dereference...

CVE-2022-2085

A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buffer device, it relies on an initdeviceprocs defined for the device that uses it as a prototype that depends upon the number of bits per...

CVE-2021-22570 Nullptr Dereference in Protobuf

Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error message. Since the symbol is incorrectly parsed, the file is nullptr. We recommend upgrading to...

CVE-2020-36135

AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component ratehist.c...

Zephyr Null Pointer Dereference Vulnerability (CNVD-2021-95618)

Zephyr is an open source, small, scalable real-time operating system. Zephyr null pointer dereference vulnerability, which stems from mishandling of omitted source and destination addresses. No detailed vulnerability details are provided at this time...

GNU LibreDWG Null Pointer Dereference Vulnerability (CNVD-2021-36640)

LibreDWG is a free C library for reading and writing DWG files. A null pointer dereference vulnerability exists in GNU LibreDWG version 0.10. An attacker can obtain a null pointer dereference via the getbmp ... /... /programs/dwgbmp.c:164 to cause a denial of service...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. A NULL pointer dereference occurs when calling TF operations with tensors of non-numeric types resulting in a type confusion when converting Python array to C++, allowing an attacker to crash the application and potentially execute arbitrary code on...

GPAC Null Pointer Dereference Vulnerability (CNVD-2021-30178)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the gfisomcencgetdefaultinfointernal function in GPAC version 1.0.1. An attacker could exploit this vulnerability via specially crafted files to cause a denial ...