NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

CVEs (5,447)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-31018 1Nvidia 1Virtual Gpu Jun 17, 2026 Nov 2, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 NVIDIA GPU Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause a NULL-pointer dereference, which may lead to denial of service.
CVE-2023-46239 1Quic Go Project 1Quic Go Jun 17, 2026 Oct 31, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 quic-go is an implementation of the QUIC protocol in Go. Starting in version 0.37.0 and prior to version 0.37.3, by serializing an ACK frame after the CRYTPO that allows a node to complete the handshake, a remote node co...Show more quic-go is an implementation of the QUIC protocol in Go. Starting in version 0.37.0 and prior to version 0.37.3, by serializing an ACK frame after the CRYTPO that allows a node to complete the handshake, a remote node could trigger a nil pointer dereference (leading to a panic) when the node attempted to drop the Handshake packet number space. An attacker can bring down a quic-go node with very minimal effort. Completing the QUIC handshake only requires sending and receiving a few packets. Version 0.37.3 contains a patch. Versions before 0.37.0 are not affected.Show less
CVE-2023-46867 1Color 1Demoiccmax Jun 17, 2026 Oct 30, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 In International Color Consortium DemoIccMAX 79ecb74, CIccXformMatrixTRC::GetCurve in IccCmm.cpp in libSampleICC.a has a NULL pointer dereference.
CVE-2023-46862 1Linux 1Linux Kernel Jun 17, 2026 Oct 29, 2023 N/A· v4 4.7 MEDIUM· v3 N/A· v2 An issue was discovered in the Linux kernel through 6.5.9. During a race with SQ thread exit, an io_uring/fdinfo.c io_uring_show_fdinfo NULL pointer dereference can occur.
CVE-2023-46345 1Fossies 1Catdoc Jun 17, 2026 Oct 26, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/xlsparse.c.
CVE-2023-45680 1Nothings 1Stb Vorbis.c Jun 17, 2026 Oct 21, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allocation failure in `start_decoder`. In that case the function returns early, the `f->comment_list` is...Show more stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allocation failure in `start_decoder`. In that case the function returns early, the `f->comment_list` is set to `NULL`, but `f->comment_list_length` is not reset. Later in `vorbis_deinit` it tries to dereference the `NULL` pointer. This issue may lead to denial of service.Show less
CVE-2023-45667 1Nothings 1Stb Image.h Jun 17, 2026 Oct 21, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 stb_image is a single file MIT licensed library for processing images. If `stbi__load_gif_main` in `stbi_load_gif_from_memory` fails it returns a null pointer and may keep the `z` variable uninitialized. In case the cal...Show more stb_image is a single file MIT licensed library for processing images. If `stbi__load_gif_main` in `stbi_load_gif_from_memory` fails it returns a null pointer and may keep the `z` variable uninitialized. In case the caller also sets the flip vertically flag, it continues and calls `stbi__vertical_flip_slices` with the null pointer result value and the uninitialized `z` value. This may result in a program crash.Show less
CVE-2023-5590 1Selenium 1Selenium Jun 17, 2026 Oct 15, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 NULL Pointer Dereference in GitHub repository seleniumhq/selenium prior to 4.14.0.
CVE-2023-5586 1Gpac 1Gpac Jun 17, 2026 Oct 15, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3.0-DEV.
CVE-2023-32970 1Qnap 3Qts Quts HeroQutscloud Jun 17, 2026 Oct 13, 2023 N/A· v4 4.9 MEDIUM· v3 N/A· v2 A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to launch a denial-of-service (DoS) at...Show more A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to launch a denial-of-service (DoS) attack via a network. QES is not affected. We have already fixed the vulnerability in the following versions: QuTS hero h5.0.1.2515 build 20230907 and later QuTS hero h5.1.0.2453 build 20230708 and later QuTS hero h4.5.4.2476 build 20230728 and later QuTScloud c5.1.0.2498 and later QTS 5.1.0.2444 build 20230629 and later QTS 4.5.4.2467 build 20230718 and later Show less
CVE-2023-38171 1Microsoft 4.net Visual Studio 2022Windows 11 22h2+1 more Jun 17, 2026 Oct 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Microsoft QUIC Denial of Service Vulnerability
CVE-2023-36709 1Microsoft 9Windows 10 1507 Windows 10 1809Windows 10 21h2+6 more Jun 17, 2026 Oct 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Microsoft AllJoyn API Denial of Service Vulnerability
CVE-2023-36603 1Microsoft 7Windows 10 1809 Windows 10 21h2Windows 10 22h2+4 more Jun 17, 2026 Oct 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Windows TCP/IP Denial of Service Vulnerability
CVE-2023-36602 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 Oct 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Windows TCP/IP Denial of Service Vulnerability
CVE-2023-5441 2Fedoraproject Vim 2Fedora Vim Jun 17, 2026 Oct 5, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e28690229b68584f2d84556f8960.
CVE-2023-42754 3Fedoraproject LinuxRedhat 3Enterprise Linux FedoraLinux Kernel Jun 17, 2026 Oct 5, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was assumed to be associated with a device before calling __ip_options_compile, which is not always the case if the skb is...Show more A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was assumed to be associated with a device before calling __ip_options_compile, which is not always the case if the skb is re-routed by ipvs. This issue may allow a local user with CAP_NET_ADMIN privileges to crash the system.Show less
CVE-2023-43898 1Nothings 1Stb Image.h Jun 17, 2026 Oct 3, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function stbi__convert_format. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted pic file.
CVE-2023-24847 1Qualcomm 255315 5g Iot Modem Firmware Aqt1000 FirmwareAr8031 Firmware+252 more Jun 17, 2026 Oct 3, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in Modem while allocating DSM items.
CVE-2022-48606 1Huawei 2Emui Harmonyos Jun 17, 2026 Sep 27, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Stability-related vulnerability in the binder background management and control module. Successful exploitation of this vulnerability may affect availability.
CVE-2023-20233 1Cisco 1Ios Xr Jun 17, 2026 Sep 13, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 A vulnerability in the Connectivity Fault Management (CFM) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vuln...Show more A vulnerability in the Connectivity Fault Management (CFM) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to incorrect processing of invalid continuity check messages (CCMs). An attacker could exploit this vulnerability by sending crafted CCMs to an affected device. A successful exploit could allow the attacker to cause the CFM service to crash when a user displays information about maintenance end points (MEPs) for peer MEPs on an affected device.Show less

Previous 1...157158159...273 Next