Filtered by CWE-476
Total 3485 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-46043 1 Gpac 1 Gpac 2024-08-04 5.5 Medium
A Pointer Dereference Vulnerability exits in GPAC 1.0.1 in the gf_list_count function, which causes a Denial of Service.
CVE-2021-46047 1 Gpac 1 Gpac 2024-08-04 5.5 Medium
A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf_hinter_finalize function.
CVE-2021-46019 2 Fedoraproject, Gnu 2 Fedora, Recutils 2024-08-04 5.5 Medium
An untrusted pointer dereference in rec_db_destroy() at rec-db.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash.
CVE-2021-45846 1 Slic3r 1 Slic3r 2024-08-04 5.5 Medium
A flaw in the AMF parser of Slic3r libslic3r 1.3.0 allows an attacker to cause an application crash using a crafted AMF document, where a metadata tag lacks a "type" attribute.
CVE-2021-45847 1 Slic3r 1 Slic3r 2024-08-04 5.5 Medium
Several missing input validations in the 3MF parser component of Slic3r libslic3r 1.3.0 can each allow an attacker to cause an application crash using a crafted 3MF input file.
CVE-2021-45831 1 Gpac 1 Gpac 2024-08-04 5.5 Medium
A Null Pointer Dereference vulnerability exitgs in GPAC 1.0.1 in MP4Box via __strlen_avx2, which causes a Denial of Service.
CVE-2021-45769 1 Mz-automation 1 Libiec61850 2024-08-04 7.5 High
A NULL pointer dereference in AcseConnection_parseMessage at src/mms/iso_acse/acse.c of libiec61850 v1.5.0 can lead to a segmentation fault or application crash.
CVE-2021-45761 1 Ropium Project 1 Ropium 2024-08-04 7.5 High
ROPium v3.1 was discovered to contain an invalid memory address dereference via the find() function.
CVE-2021-45773 1 Mz-automation 1 Lib60870 2024-08-04 7.5 High
A NULL pointer dereference in CS104_IPAddress_setFromString at src/iec60870/cs104/cs104_slave.c of lib60870 commit 0d5e76e can lead to a segmentation fault or application crash.
CVE-2021-45385 1 Rockcarry 1 Ffjpeg 2024-08-04 6.5 Medium
A Null Pointer Dereference vulnerability exits in ffjpeg d5cfd49 (2021-12-06) in bmp_load(). When the size information in metadata of the bmp is out of range, it returns without assign memory buffer to `pb->pdata` and did not exit the program. So the program crashes when it tries to access the pb->data, in jfif_encode() at jfif.c:763. This is due to the incomplete patch for CVE-2020-13438.
CVE-2021-45343 3 Debian, Fedoraproject, Librecad 3 Debian Linux, Fedora, Librecad 2024-08-04 5.5 Medium
In LibreCAD 2.2.0, a NULL pointer dereference in the HATCH handling of libdxfrw allows an attacker to crash the application using a crafted DXF document.
CVE-2021-45340 1 Libsixel Project 1 Libsixel 2024-08-04 6.5 Medium
In Libsixel prior to and including v1.10.3, a NULL pointer dereference in the stb_image.h component of libsixel allows attackers to cause a denial of service (DOS) via a crafted PICT file.
CVE-2021-45260 1 Gpac 1 Gpac 2024-08-04 5.5 Medium
A null pointer dereference vulnerability exists in gpac 1.1.0 in the lsr_read_id.part function, which causes a segmentation fault and application crash.
CVE-2021-45266 1 Gpac 1 Gpac 2024-08-04 7.5 High
A null pointer dereference vulnerability exists in gpac 1.1.0 via the lsr_read_anim_values_ex function, which causes a segmentation fault and application crash.
CVE-2021-45259 1 Gpac 1 Gpac 2024-08-04 5.5 Medium
An Invalid pointer reference vulnerability exists in gpac 1.1.0 via the gf_svg_node_del function, which causes a segmentation fault and application crash.
CVE-2021-45292 1 Gpac 1 Gpac 2024-08-04 5.5 Medium
The gf_isom_hint_rtp_read function in GPAC 1.0.1 allows attackers to cause a denial of service (Invalid memory address dereference) via a crafted file in the MP4Box command.
CVE-2021-45267 1 Gpac 1 Gpac 2024-08-04 5.5 Medium
An invalid memory address dereference vulnerability exists in gpac 1.1.0 via the svg_node_start function, which causes a segmentation fault and application crash.
CVE-2021-45256 1 Nasm 1 Netwide Assembler 2024-08-04 5.5 Medium
A Null Pointer Dereference vulnerability existfs in nasm 2.16rc0 via asm/preproc.c.
CVE-2021-45117 2 Opcfoundation, Siemens 4 Ua-nodeset, Simatic Net Pc, Sitop Manager and 1 more 2024-08-04 6.5 Medium
The OPC autogenerated ANSI C stack stubs (in the NodeSets) do not handle all error cases. This can lead to a NULL pointer dereference.
CVE-2021-45079 4 Canonical, Debian, Fedoraproject and 1 more 5 Ubuntu Linux, Debian Linux, Extra Packages For Enterprise Linux and 2 more 2024-08-04 9.1 Critical
In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2) even without server authentication.