← Back
CWE-476

5,447 CVEs • Abstraction: Base • Likelihood of Exploit: Medium

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

JSON object

Loading...

CVEs (5,447)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Debian
Linux
2Debian Linux
Linux Kernel
Jun 17, 2026
Jan 17, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a denial of service (system crash) via a crafted traffic control configuration that...Show more
In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a denial of service (system crash) via a crafted traffic control configuration that is set up with "tc qdisc" and "tc class" commands. This affects qdisc_graft in net/sched/sch_api.c.Show less
1Libetpan Project
1Libetpan
Jun 17, 2026
Jan 17, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
In libetpan a null pointer dereference in mailimap_mailbox_data_status_free in low-level/imap/mailimap_types.c was found that could lead to a remote denial of service or other potential consequences.
1Freeradius
1Freeradius
Jun 17, 2026
Jan 17, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Ins...Show more
In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash.Show less
2Linux
Netapp
2Hci Baseboard Management Controller
Linux Kernel
Jun 17, 2026
Jan 17, 2023
N/A· v4
7.1 HIGH· v3
N/A· v2
A flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is in progress to detach in sl_tx_timeout in drivers/net/slip/slip.c. This issue could allow an attacker to crash the system...Show more
A flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is in progress to detach in sl_tx_timeout in drivers/net/slip/slip.c. This issue could allow an attacker to crash the system or leak internal kernel information.Show less
1Linux
1Linux Kernel
Jun 17, 2026
Jan 12, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A flaw NULL Pointer Dereference in the Linux kernel NTFS3 driver function attr_punch_hole() was found. A local user could use this flaw to crash the system.
2Debian
Ffmpeg
2Debian Linux
Ffmpeg
Jun 17, 2026
Jan 12, 2023
N/A· v4
5.3 MEDIUM· v3
N/A· v2
A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avformat_new_stream() and...Show more
A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avformat_new_stream() and triggers the null pointer dereference error, causing an application to crash.Show less
1Microsoft
5Windows 10
Windows 11Windows Server 2016+2 more
Jun 17, 2026
Jan 10, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
1Microsoft
10Windows 10
Windows 11Windows 7+7 more
Jun 17, 2026
Jan 10, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 20h2+10 more
Jun 17, 2026
Jan 10, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
1Microsoft
9Windows 10 1607
Windows 10 1809Windows 10 21h2+6 more
Jun 17, 2026
Jan 10, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability
1Linksys
1Wrt54gl Firmware
Jun 17, 2026
Jan 9, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
A null pointer dereference vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. A null pointer dereference in the soap_action function within the upnp binary can be triggered...Show more
A null pointer dereference vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. A null pointer dereference in the soap_action function within the upnp binary can be triggered by an unauthenticated attacker via a malicious POST request invoking the AddPortMapping action.Show less
1Qualcomm
44Apq8017 Firmware
Apq8096au FirmwareAr8031 Firmware+41 more
Jun 17, 2026
Jan 9, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data.
1Qualcomm
46Apq8017 Firmware
Apq8096au FirmwareAr8031 Firmware+43 more
Jun 17, 2026
Jan 9, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed.
1Mediaarea
1Zenlib
Jun 17, 2026
Jan 7, 2023
N/A· v4
7.5 HIGH· v3
2.3 LOW· v2
A vulnerability classified as problematic has been found in MediaArea ZenLib up to 0.4.38. This affects the function Ztring::Date_From_Seconds_1970_Local of the file Source/ZenLib/Ztring.cpp. The manipulation of the argu...Show more
A vulnerability classified as problematic has been found in MediaArea ZenLib up to 0.4.38. This affects the function Ztring::Date_From_Seconds_1970_Local of the file Source/ZenLib/Ztring.cpp. The manipulation of the argument Value leads to unchecked return value to null pointer dereference. Upgrading to version 0.4.39 is able to address this issue. The identifier of the patch is 6475fcccd37c9cf17e0cfe263b5fe0e2e47a8408. It is recommended to upgrade the affected component. The identifier VDB-217629 was assigned to this vulnerability.Show less
1Gpac
1Gpac
Jun 17, 2026
Jan 5, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Null pointer dereference via filters/dmx_m2ts.c:343 in m2tsdmx_declare_pid
1Nvidia
2Cloud Gaming
Virtual Gpu
Jun 17, 2026
Dec 30, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a null-pointer dereference occurs, which may lead to denial of service.
1Nvidia
2Cloud Gaming
Virtual Gpu
Jun 17, 2026
Dec 30, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause a null-pointer dereference, which may lead to denial of service.
1Nvidia
2Cloud Gaming
Virtual Gpu
Jun 17, 2026
Dec 30, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unhandled return value can lead to a null-pointer dereference, which may lead to denial of service.
1Nvidia
2Cloud Gaming
Virtual Gpu
Jun 17, 2026
Dec 30, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged user can cause a null-pointer dereference, which may lead to denial of service.
1Nvidia
2Cloud Gaming
Gpu Display Driver
Jun 17, 2026
Dec 30, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
NVIDIA Display Driver for Linux contains a vulnerability in the Virtual GPU Manager, where it does not check the return value from a null-pointer dereference, which may lead to denial of service.