← Back
CWE-476

5,447 CVEs • Abstraction: Base • Likelihood of Exploit: Medium

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

JSON object

Loading...

CVEs (5,447)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Filseclab
1Twister Antivirus
Jun 17, 2026
Mar 17, 2023
N/A· v4
6.5 MEDIUM· v3
7.8 HIGH· v2
A vulnerability was found in Filseclab Twister Antivirus 8. It has been rated as critical. This issue affects the function 0x8011206B in the library fildds.sys of the component IoControlCode Handler. The manipulation lea...Show more
A vulnerability was found in Filseclab Twister Antivirus 8. It has been rated as critical. This issue affects the function 0x8011206B in the library fildds.sys of the component IoControlCode Handler. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223289 was assigned to this vulnerability.Show less
1Broadcom
1Tcpreplay
Jun 17, 2026
Mar 16, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse_list function at the list.c:81 endpoint.
1Broadcom
1Tcpreplay
Jun 17, 2026
Mar 16, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the macinstring function.
1Broadcom
1Tcpreplay
Jun 17, 2026
Mar 16, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse endpoints function.
1Broadcom
1Tcpreplay
Jun 17, 2026
Mar 16, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
An issue found in TCPReplay v.4.4.3 allows a remote attacker to cause a denial of service via the read_hexstring function at the utils.c:309 endpoint.
3Debian
LinuxNetapp
7Debian Linux
H300sH410c+4 more
Jun 17, 2026
Mar 16, 2023
N/A· v4
7.0 HIGH· v3
N/A· v2
do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference).
1Struktur
1Libde265
Jun 17, 2026
Mar 15, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Libde265 v1.0.11 was discovered to contain a segmentation violation via the function decoder_context::process_slice_segment_header at decctx.cc.
1Microsoft
15365
OfficeOffice Long Term Servicing Channel+12 more
Jun 17, 2026
Mar 14, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Windows Graphics Component Elevation of Privilege Vulnerability
1Microsoft
12Windows 10
Windows 10 1607Windows 10 1809+9 more
Jun 17, 2026
Mar 14, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
1Steptools
1Ifcmesh Library
Jun 17, 2026
Mar 13, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
STEPTools v18SP1 ifcmesh library (v18.1) is affected due to a null pointer dereference, which could allow an attacker to deny application usage when reading a specially constructed file, resulting in an application cras...Show more
STEPTools v18SP1 ifcmesh library (v18.1) is affected due to a null pointer dereference, which could allow an attacker to deny application usage when reading a specially constructed file, resulting in an application crash. Show less
1Vim
1Vim
Jun 17, 2026
Mar 11, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1402.
1Openatom
1Openharmony
Jun 17, 2026
Mar 10, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
The bundle management subsystem within OpenHarmony-v3.1.4 and prior versions has a null pointer reference vulnerability which local attackers can exploit this vulnerability to cause a DoS attack to the system when instal...Show more
The bundle management subsystem within OpenHarmony-v3.1.4 and prior versions has a null pointer reference vulnerability which local attackers can exploit this vulnerability to cause a DoS attack to the system when installing a malicious HAP package. Show less
1Openatom
1Openharmony
Jun 17, 2026
Mar 10, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Communication Wi-Fi subsystem within OpenHarmony-v3.1.4 and prior versions, OpenHarmony-v3.0.7 and prior versions has a null pointer reference vulnerability which local attackers can exploit this vulnerability to cause...Show more
Communication Wi-Fi subsystem within OpenHarmony-v3.1.4 and prior versions, OpenHarmony-v3.0.7 and prior versions has a null pointer reference vulnerability which local attackers can exploit this vulnerability to cause the current application to crash. Show less
1Radare
1Radare2
Jun 17, 2026
Mar 10, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
radare2 v5.8.3 was discovered to contain a segmentation fault via the component wasm_dis at p/wasm/wasm.c.
1Hashicorp
1Consul
Jun 17, 2026
Mar 9, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Consul and Consul Enterprise allowed an authenticated user with service:write permissions to trigger a workflow that causes Consul server and client agents to crash under certain circumstances. This vulnerability was fix...Show more
Consul and Consul Enterprise allowed an authenticated user with service:write permissions to trigger a workflow that causes Consul server and client agents to crash under certain circumstances. This vulnerability was fixed in Consul 1.14.5.Show less
2Fedoraproject
Vim
2Fedora
Vim
Jun 17, 2026
Mar 7, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392.
1Fabulatech
1Webcam For Remote Desktop
Jun 17, 2026
Mar 6, 2023
N/A· v4
5.5 MEDIUM· v3
1.7 LOW· v2
A vulnerability has been found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This vulnerability affects the function 0x222010/0x222018 in the library ftwebcam.sys of the component IOCTL Ha...Show more
A vulnerability has been found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This vulnerability affects the function 0x222010/0x222018 in the library ftwebcam.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. VDB-222358 is the identifier assigned to this vulnerability.Show less
1Nvidia
1Cuda Toolkit
Jun 17, 2026
Mar 2, 2023
N/A· v4
3.3 LOW· v3
N/A· v2
NVIDIA CUDA Toolkit SDK contains a bug in cuobjdump, where a local user running the tool against an ill-formed binary may cause a null- pointer dereference, which may result in a limited denial of service.
1Linux
1Linux Kernel
Jun 17, 2026
Mar 1, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
In the Linux kernel before 5.15.13, drivers/net/ethernet/mellanox/mlx5/core/steering/dr_domain.c misinterprets the mlx5_get_uars_page return value (expects it to be NULL in the error case, whereas it is actually an error...Show more
In the Linux kernel before 5.15.13, drivers/net/ethernet/mellanox/mlx5/core/steering/dr_domain.c misinterprets the mlx5_get_uars_page return value (expects it to be NULL in the error case, whereas it is actually an error pointer).Show less
2Linux
Suse
2Linux Enterprise Server
Linux Kernel
Jun 17, 2026
Mar 1, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
In the Linux kernel before 6.2, mm/memory-tiers.c misinterprets the alloc_memory_type return value (expects it to be NULL in the error case, whereas it is actually an error pointer). NOTE: this is disputed by third parti...Show more
In the Linux kernel before 6.2, mm/memory-tiers.c misinterprets the alloc_memory_type return value (expects it to be NULL in the error case, whereas it is actually an error pointer). NOTE: this is disputed by third parties because there are no realistic cases in which a user can cause the alloc_memory_type error case to be reached.Show less