Draft in the CWE catalog · 32 CVEs mapped
The product does not check for an error after calling a function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference.
NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause an unchecked return value to a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service.
libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. From to 1.8.7-r1, a wrong NULL check after an allocation call in sixel_decode_raw and sixel_decode causes a NULL pointer dereference whenever the allocation fails. The check tests the address of the output parameter (always non-NULL) instead of the value the malloc returned. On allocation failure, the function continues and writes through a NULL pointer, crashing the process. This is a denial of service against any caller of these public APIs that hits a low-memory condition. This vulnerability is fixed in 1.8.7-r2.
⚡ A sneaky oversight in iccDEV lets attackers mess around with ICC profiles, potentially putting your data at serious risk! 🔥 Think of it like a restaurant where the chef allows customers to change the recipe on the fly without checking for safety—one wrong ingredient can spoil the whole dish! This vulnerability could lead to devastating consequences, including denial of service, manipulated data, or even unauthorized code execution! An attacker could exploit this to seize control of your application or disrupt your services, creating chaos in your systems.