NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

CVEs (5,441)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-29224 1Envoyproxy 1Envoy Jun 17, 2026 Jun 9, 2022 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 Envoy is a cloud-native high-performance proxy. Versions of envoy prior to 1.22.1 are subject to a segmentation fault in the GrpcHealthCheckerImpl. Envoy can perform various types of upstream health checking. One of them...Show more Envoy is a cloud-native high-performance proxy. Versions of envoy prior to 1.22.1 are subject to a segmentation fault in the GrpcHealthCheckerImpl. Envoy can perform various types of upstream health checking. One of them uses gRPC. Envoy also has a feature which can “hold” (prevent removal) upstream hosts obtained via service discovery until configured active health checking fails. If an attacker controls an upstream host and also controls service discovery of that host (via DNS, the EDS API, etc.), an attacker can crash Envoy by forcing removal of the host from service discovery, and then failing the gRPC health check request. This will crash Envoy via a null pointer dereference. Users are advised to upgrade to resolve this vulnerability. Users unable to upgrade may disable gRPC health checking and/or replace it with a different health checking type as a mitigation.Show less
CVE-2022-32202 1Libjpeg Project 1Libjpeg Jun 17, 2026 Jun 2, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 In libjpeg 1.63, there is a NULL pointer dereference in LineBuffer::FetchRegion in linebuffer.cpp.
CVE-2022-32201 1Libjpeg Project 1Libjpeg Jun 17, 2026 Jun 2, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 In libjpeg 1.63, there is a NULL pointer dereference in Component::SubXOf in component.hpp.
CVE-2022-29788 1Libmobi Project 1Libmobi Jun 17, 2026 Jun 2, 2022 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 libmobi before v0.10 contains a NULL pointer dereference via the component mobi_buffer_getpointer. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted mobi file.
CVE-2022-29694 1Unicorn Engine 1Unicorn Engine Jun 17, 2026 Jun 2, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Unicorn Engine v2.0.0-rc7 and below was discovered to contain a NULL pointer dereference via qemu_ram_free.
CVE-2022-1789 4Debian FedoraprojectLinux+1 more 4Debian Linux Enterprise LinuxFedora+1 more Jun 17, 2026 Jun 2, 2022 N/A· v4 6.8 MEDIUM· v3 6.9 MEDIUM· v2 With shadow paging enabled, the INVPCID instruction results in a call to kvm_mmu_invpcid_gva. If INVPCID is executed with CR0.PG=0, the invlpg callback is not set and the result is a NULL pointer dereference.
CVE-2021-42202 1Swftools 1Swftools Jun 17, 2026 Jun 2, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function swf_DeleteFilter() located in swffilter.c. It allows an attacker to cause Denial of Service.
CVE-2021-42200 1Swftools 1Swftools Jun 17, 2026 Jun 2, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function main() located in swfdump.c. It allows an attacker to cause Denial of Service.
CVE-2021-42198 1Swftools 1Swftools Jun 17, 2026 Jun 2, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function swf_GetBits() located in rfxswf.c. It allows an attacker to cause Denial of Service.
CVE-2021-42196 1Swftools 1Swftools Jun 17, 2026 Jun 2, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function traits_parse() located in abc.c. It allows an attacker to cause Denial of Service.
CVE-2021-33254 1Embedthis 1Appweb Jun 17, 2026 Jun 2, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in src/http/httpLib.c in EmbedThis Appweb Community Edition 8.2.1, allows attackers to cause a denial of service via the stream paramter to the parseUri function.
CVE-2021-44974 1Radare 1Radare2 Jun 17, 2026 May 25, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 radareorg radare2 version 5.5.2 is vulnerable to NULL Pointer Dereference via libr/bin/p/bin_symbols.c binary symbol parser.
CVE-2022-29206 1Google 1Tensorflow Jun 17, 2026 May 20, 2022 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.SparseTensorDenseAdd` does not fully validate the input arguments. In this c...Show more TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.SparseTensorDenseAdd` does not fully validate the input arguments. In this case, a reference gets bound to a `nullptr` during kernel execution. This is undefined behavior. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.Show less
CVE-2022-29205 1Google 1Tensorflow Jun 17, 2026 May 20, 2022 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, there is a potential for segfault / denial of service in TensorFlow by calling `tf.compat.v1.` ops which don'...Show more TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, there is a potential for segfault / denial of service in TensorFlow by calling `tf.compat.v1.` ops which don't yet have support for quantized types, which was added after migration to TensorFlow 2.x. In these scenarios, since the kernel is missing, a `nullptr` value is passed to `ParseDimensionValue` for the `py_value` argument. Then, this is dereferenced, resulting in segfault. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.Show less
CVE-2022-29201 1Google 1Tensorflow Jun 17, 2026 May 20, 2022 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.QuantizedConv2D` does not fully validate the input arguments. In this case,...Show more TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.QuantizedConv2D` does not fully validate the input arguments. In this case, references get bound to `nullptr` for each argument that is empty. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.Show less
CVE-2022-29031 1Siemens 2Jt2go Teamcenter Visualization Jun 17, 2026 May 20, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visualization V14.0 (All versions < V14.0.0.1). The CGM_NIST_Loader.dll conta...Show more A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visualization V14.0 (All versions < V14.0.0.1). The CGM_NIST_Loader.dll contains a null pointer dereference vulnerability while parsing specially crafted CGM files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.Show less
CVE-2022-29029 1Siemens 2Jt2go Teamcenter Visualization Jun 17, 2026 May 20, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visualization V14.0 (All versions < V14.0.0.1). The CGM_NIST_Loader.dll conta...Show more A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visualization V14.0 (All versions < V14.0.0.1). The CGM_NIST_Loader.dll contains a null pointer dereference vulnerability while parsing specially crafted CGM files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.Show less
CVE-2021-27548 1Xpdfreader 1Xpdf Jun 17, 2026 May 18, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 There is a Null Pointer Dereference vulnerability in the XFAScanner::scanNode() function in XFAScanner.cc in xpdf 4.03.
CVE-2022-30975 3Artifex DebianFedoraproject 3Debian Linux FedoraMujs Jun 17, 2026 May 18, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 In Artifex MuJS through 1.2.0, jsP_dumpsyntax in jsdump.c has a NULL pointer dereference, as demonstrated by mujs-pp.
CVE-2022-28189 1Nvidia 1Gpu Display Driver Jun 17, 2026 May 17, 2022 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a NULL pointer dereference may lead to a system crash.

Previous 1...178179180...273 Next