NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

CVEs (5,447)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-40774 1Axiosys 1Bento4 Jun 17, 2026 Sep 18, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An issue was discovered in Bento4 through 1.6.0-639. There is a NULL pointer dereference in AP4_StszAtom::GetSampleSize.
CVE-2022-36014 1Google 1Tensorflow Jun 17, 2026 Sep 16, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 TensorFlow is an open source platform for machine learning. When `mlir::tfg::TFOp::nameAttr` receives null type list attributes, it crashes. We have patched the issue in GitHub commits 3a754740d5414e362512ee981eefba41561...Show more TensorFlow is an open source platform for machine learning. When `mlir::tfg::TFOp::nameAttr` receives null type list attributes, it crashes. We have patched the issue in GitHub commits 3a754740d5414e362512ee981eefba41561a63a6 and a0f0b9a21c9270930457095092f558fbad4c03e5. The fix will be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also affected and still in supported range. There are no known workarounds for this issue.Show less
CVE-2022-36013 1Google 1Tensorflow Jun 17, 2026 Sep 16, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 TensorFlow is an open source platform for machine learning. When `mlir::tfg::GraphDefImporter::ConvertNodeDef` tries to convert NodeDefs without an op name, it crashes. We have patched the issue in GitHub commit a0f0b9a2...Show more TensorFlow is an open source platform for machine learning. When `mlir::tfg::GraphDefImporter::ConvertNodeDef` tries to convert NodeDefs without an op name, it crashes. We have patched the issue in GitHub commit a0f0b9a21c9270930457095092f558fbad4c03e5. The fix will be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also affected and still in supported range. There are no known workarounds for this issue.Show less
CVE-2022-36011 1Google 1Tensorflow Jun 17, 2026 Sep 16, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 TensorFlow is an open source platform for machine learning. When `mlir::tfg::ConvertGenericFunctionToFunctionDef` is given empty function attributes, it gives a null dereference. We have patched the issue in GitHub commi...Show more TensorFlow is an open source platform for machine learning. When `mlir::tfg::ConvertGenericFunctionToFunctionDef` is given empty function attributes, it gives a null dereference. We have patched the issue in GitHub commit 1cf45b831eeb0cab8655c9c7c5d06ec6f45fc41b. The fix will be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also affected and still in supported range. There are no known workarounds for this issue.Show less
CVE-2022-36000 1Google 1Tensorflow Jun 17, 2026 Sep 16, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 TensorFlow is an open source platform for machine learning. When `mlir::tfg::ConvertGenericFunctionToFunctionDef` is given empty function attributes, it gives a null dereference. We have patched the issue in GitHub commi...Show more TensorFlow is an open source platform for machine learning. When `mlir::tfg::ConvertGenericFunctionToFunctionDef` is given empty function attributes, it gives a null dereference. We have patched the issue in GitHub commit aed36912609fc07229b4d0a7b44f3f48efc00fd0. The fix will be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also affected and still in supported range. There are no known workarounds for this issue.Show less
CVE-2022-40759 1Samsung 1Mtower Jun 17, 2026 Sep 16, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 A NULL pointer dereference issue in the TEE_MACCompareFinal function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_MACCompareFinal with a N...Show more A NULL pointer dereference issue in the TEE_MACCompareFinal function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_MACCompareFinal with a NULL pointer for the parameter operation.Show less
CVE-2022-35965 1Google 1Tensorflow Jun 17, 2026 Sep 16, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 TensorFlow is an open source platform for machine learning. If `LowerBound` or `UpperBound` is given an empty`sorted_inputs` input, it results in a `nullptr` dereference, leading to a segfault that can be used to trigger...Show more TensorFlow is an open source platform for machine learning. If `LowerBound` or `UpperBound` is given an empty`sorted_inputs` input, it results in a `nullptr` dereference, leading to a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit bce3717eaef4f769019fd18e990464ca4a2efeea. The fix will be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also affected and still in supported range. There are no known workarounds for this issue.Show less
CVE-2022-40738 1Axiosys 1Bento4 Jun 17, 2026 Sep 15, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in AP4_DescriptorListWriter::Action in Core/Ap4Descriptor.h, called from AP4_EsDescriptor::WriteFields and AP4_Expandable::Write.
CVE-2022-40476 1Linux 1Linux Kernel Jun 17, 2026 Sep 14, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A null pointer dereference issue was discovered in fs/io_uring.c in the Linux kernel before 5.15.62. A local user could use this flaw to crash the system or potentially cause a denial of service.
CVE-2022-3202 2Linux Netapp 6H300s Firmware H410c FirmwareH410s Firmware+3 more Jun 17, 2026 Sep 14, 2022 N/A· v4 7.1 HIGH· v3 N/A· v2 A NULL pointer dereference flaw in diFree in fs/jfs/inode.c in Journaled File System (JFS)in the Linux kernel. This could allow a local attacker to crash the system or leak kernel internal information.
CVE-2022-38497 1Lief Project 1Lief Jun 17, 2026 Sep 13, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 LIEF commit 365a16a was discovered to contain a segmentation violation via the component CoreFile.tcc:69.
CVE-2022-38307 1Lief Project 1Lief Jun 17, 2026 Sep 13, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF::MachO::SegmentCommand::file_offset() at /MachO/SegmentCommand.cpp.
CVE-2022-37797 2Debian Lighttpd 2Debian Linux Lighttpd Jun 17, 2026 Sep 12, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It leads to null pointer dereference which crashes the server. It could be use...Show more In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It leads to null pointer dereference which crashes the server. It could be used by an external attacker to cause denial of service condition.Show less
CVE-2022-38096 1Linux 1Linux Kernel Jun 17, 2026 Sep 9, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attac...Show more A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).Show less
CVE-2022-3153 1Vim 1Vim Jun 17, 2026 Sep 8, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
CVE-2022-36661 1Xhyve Project 1Xhyve Jun 17, 2026 Sep 7, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vi_pci_read(). This vulnerability allows attackers to cause a Denial of Service via unspecified vectors.
CVE-2022-36659 1Xhyve Project 1Xhyve Jun 17, 2026 Sep 7, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vi_pci_write(). This vulnerability allows attackers to cause a Denial of Service via unspecified vectors.
CVE-2022-25310 2Gnu Redhat 2Enterprise Linux Fribidi Jun 17, 2026 Sep 6, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. This flaw allows an attacker to pass a specially crafted file to Fribidi,...Show more A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. This flaw allows an attacker to pass a specially crafted file to Fribidi, leading to a crash and causing a denial of service.Show less
CVE-2022-39829 1Samsung 1Mtower Jun 17, 2026 Sep 5, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 There is a NULL pointer dereference in aes256_encrypt in Samsung mTower through 0.3.0 due to a missing check on the return value of EVP_CIPHER_CTX_new.
CVE-2021-35135 1Qualcomm 168Apq8017 Firmware Apq8037 FirmwareApq8053 Firmware+165 more Jun 17, 2026 Sep 2, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Vo...Show more A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less

Previous 1...173174175...273 Next