← Back
CWE-476

5,447 CVEs • Abstraction: Base • Likelihood of Exploit: Medium

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

JSON object

Loading...

CVEs (5,447)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Paddlepaddle
1Paddlepaddle
Jun 17, 2026
Jan 3, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Nullptr dereference in paddle.crop in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.
1Paddlepaddle
1Paddlepaddle
Jun 17, 2026
Jan 3, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Nullptr in paddle.put_along_axis in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.
1Paddlepaddle
1Paddlepaddle
Jun 17, 2026
Jan 3, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Nullptr in paddle.nextafter in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.
1Paddlepaddle
1Paddlepaddle
Jun 17, 2026
Jan 3, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Nullptr in paddle.dot in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.
1Wireshark
1Wireshark
Jun 17, 2026
Jan 3, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file
1Qualcomm
304315 5g Iot Modem Firmware
Aqt1000 FirmwareAr8031 Firmware+301 more
Jun 17, 2026
Jan 2, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.
1Qualcomm
102Aqt1000 Firmware
Ar8035 FirmwareFastconnect 6200 Firmware+99 more
Jun 17, 2026
Jan 2, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call.
1Sierrawireless
1Aleos
Jun 17, 2026
Dec 25, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
OpenNDS, as used in Sierra Wireless ALEOS before 4.17.0.12 and other products, allows remote attackers to cause a denial of service (NULL pointer dereference, daemon crash, and Captive Portal outage) via a GET request to...Show more
OpenNDS, as used in Sierra Wireless ALEOS before 4.17.0.12 and other products, allows remote attackers to cause a denial of service (NULL pointer dereference, daemon crash, and Captive Portal outage) via a GET request to /opennds_auth/ that lacks a custom query string parameter and client-token.Show less
1Blosc
1C Blosc2
Jun 17, 2026
Dec 25, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_rate_decompress at zfp/blosc2-zfp.c.
1Blosc
1C Blosc2
Jun 17, 2026
Dec 25, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the zfp/blosc2-zfp.c zfp_acc_decompress. function.
1Blosc
1C Blosc2
Jun 17, 2026
Dec 25, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference in ndlz/ndlz8x8.c via a NULL pointer to memset.
1Blosc
1C Blosc2
Jun 17, 2026
Dec 25, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_prec_decompress at zfp/blosc2-zfp.c.
1Linux
1Linux Kernel
Jun 17, 2026
Dec 21, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A null pointer dereference vulnerability was found in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() in drivers/net/wireless/ath/ath10k/wmi-tlv.c in the Linux kernel. This issue could be exploited to trigger a denial of servi...Show more
A null pointer dereference vulnerability was found in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() in drivers/net/wireless/ath/ath10k/wmi-tlv.c in the Linux kernel. This issue could be exploited to trigger a denial of service.Show less
1Davegamble
1Cjson
Jun 17, 2026
Dec 14, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_SetValuestring at cJSON.c.
1Davegamble
1Cjson
Jun 17, 2026
Dec 14, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_InsertItemInArray at cJSON.c.
1Schedmd
1Slurm
Jun 17, 2026
Dec 14, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. A NULL pointer dereference leads to denial of service. The fixed versions are 22.05.11, 23.02.7, and 23.11.1.
1Adobe
1Indesign
Jun 17, 2026
Dec 13, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Adobe InDesign versions 19.0 (and earlier) and 17.4.2 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial...Show more
Adobe InDesign versions 19.0 (and earlier) and 17.4.2 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
3Fedoraproject
LinuxRedhat
3Enterprise Linux
FedoraLinux Kernel
Jun 17, 2026
Dec 11, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c in the Digital Phase Locked Loop (DPLL) subsystem in the Linux kernel. This issue could be exploited to trig...Show more
A null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c in the Digital Phase Locked Loop (DPLL) subsystem in the Linux kernel. This issue could be exploited to trigger a denial of service.Show less
3Fedoraproject
LinuxRedhat
3Enterprise Linux
FedoraLinux Kernel
Jun 17, 2026
Dec 8, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A null pointer dereference vulnerability was found in nft_dynset_init() in net/netfilter/nft_dynset.c in nf_tables in the Linux kernel. This issue may allow a local attacker with CAP_NET_ADMIN user privilege to trigger a...Show more
A null pointer dereference vulnerability was found in nft_dynset_init() in net/netfilter/nft_dynset.c in nf_tables in the Linux kernel. This issue may allow a local attacker with CAP_NET_ADMIN user privilege to trigger a denial of service.Show less
1Google
1Android
Jun 17, 2026
Dec 8, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
In multiple locations, there is a possible null dereference due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for expl...Show more
In multiple locations, there is a possible null dereference due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Show less