← Back
CWE-476

5,441 CVEs • Abstraction: Base • Likelihood of Exploit: Medium

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

JSON object

Loading...

CVEs (5,441)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Adobe
1Character Animator
Jun 17, 2026
Mar 16, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Adobe Character Animator version 4.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve a...Show more
Adobe Character Animator version 4.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
1Character Animator
Jun 17, 2026
Mar 16, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Adobe Character Animator version 4.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve a...Show more
Adobe Character Animator version 4.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
1Bridge
Jun 17, 2026
Mar 16, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Adobe Bridge version 11.1.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an applica...Show more
Adobe Bridge version 11.1.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
1Audition
Jun 17, 2026
Mar 16, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Adobe Audition version 14.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an applica...Show more
Adobe Audition version 14.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
1Audition
Jun 17, 2026
Mar 16, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Adobe Audition version 14.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an applica...Show more
Adobe Audition version 14.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
2Debian
Openexr
2Debian Linux
Openexr
Jun 17, 2026
Mar 16, 2022
N/A· v4
7.5 HIGH· v3
4.3 MEDIUM· v2
A flaw was found in OpenEXR's Multipart input file functionality. A crafted multi-part input file with no actual parts can trigger a NULL pointer dereference. The highest threat from this vulnerability is to system avail...Show more
A flaw was found in OpenEXR's Multipart input file functionality. A crafted multi-part input file with no actual parts can trigger a NULL pointer dereference. The highest threat from this vulnerability is to system availability.Show less
1Gpac
1Gpac
Jun 17, 2026
Mar 14, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
GPAC 1.0.1 is affected by a NULL pointer dereference in gf_utf8_wcslen. (gf_utf8_wcslen is a renamed Unicode utf8_wcslen function.)
1Gpac
1Gpac
Jun 17, 2026
Mar 14, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
GPAC 1.0.1 is affected by a NULL pointer dereference in gf_dump_vrml_field.isra ().
1Softing
3Datafeed Opc Suite
Opc Ua C++ Software Development KitSecure Integration Server
Jun 17, 2026
Mar 11, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in Softing OPC UA C++ SDK before 5.70. A malformed OPC/UA message abort packet makes the client crash with a NULL pointer dereference.
4Debian
FedoraprojectLibtiff+1 more
4Debian Linux
FedoraLibtiff+1 more
Jun 17, 2026
Mar 11, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff versions up to 4.3.0 could lead to Denial of Service via crafted TIFF file.
1Foxit
2Pdf Editor
Pdf Reader
Jun 17, 2026
Mar 10, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Foxit PDF Reader and Editor before 11.2.1 and PhantomPDF before 10.1.7 allow a NULL pointer dereference during PDF parsing because the pointer is used without proper validation.
2Fedoraproject
Linux
2Fedora
Linux Kernel
Jun 17, 2026
Mar 10, 2022
N/A· v4
5.5 MEDIUM· v3
4.9 MEDIUM· v2
A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the map_get_next_key function of the BPF bloom filter. This flaw allows a local user to crash the system. This flaw...Show more
A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the map_get_next_key function of the BPF bloom filter. This flaw allows a local user to crash the system. This flaw affects Linux kernel versions prior to 5.17-rc1.Show less
2Fedoraproject
Linux
2Fedora
Linux Kernel
Jun 17, 2026
Mar 10, 2022
N/A· v4
5.5 MEDIUM· v3
1.9 LOW· v2
A NULL pointer dereference was found in the Linux kernel's KVM when dirty ring logging is enabled without an active vCPU context. An unprivileged local attacker on the host may use this flaw to cause a kernel oops condit...Show more
A NULL pointer dereference was found in the Linux kernel's KVM when dirty ring logging is enabled without an active vCPU context. An unprivileged local attacker on the host may use this flaw to cause a kernel oops condition and thus a denial of service by issuing a KVM_XEN_HVM_SET_ATTR ioctl. This flaw affects Linux kernel versions prior to 5.17-rc1.Show less
3Fedoraproject
LinuxNetapp
10Fedora
H300e FirmwareH300s Firmware+7 more
Jun 17, 2026
Mar 10, 2022
N/A· v4
7.1 HIGH· v3
3.6 LOW· v2
A NULL pointer dereference flaw was found in the btrfs_rm_device function in fs/btrfs/volumes.c in the Linux Kernel, where triggering the bug requires ‘CAP_SYS_ADMIN’. This flaw allows a local attacker to crash the syste...Show more
A NULL pointer dereference flaw was found in the btrfs_rm_device function in fs/btrfs/volumes.c in the Linux Kernel, where triggering the bug requires ‘CAP_SYS_ADMIN’. This flaw allows a local attacker to crash the system or leak kernel internal information. The highest threat from this vulnerability is to system availability.Show less
1Rockcarry
1Ffjpeg
Jun 17, 2026
Mar 10, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The function bitstr_tell at bitstr.c in ffjpeg commit 4ab404e has a NULL pointer dereference.
1Mruby
1Mruby
Jun 17, 2026
Mar 10, 2022
N/A· v4
5.5 MEDIUM· v3
7.1 HIGH· v2
NULL Pointer Dereference in GitHub repository mruby/mruby prior to 3.2.
1Bitdefender
5Antivirus Plus
Endpoint Security ToolsInternet Security+2 more
Jun 17, 2026
Mar 7, 2022
N/A· v4
6.1 MEDIUM· v3
3.6 LOW· v2
A NULL Pointer Dereference vulnerability in the messaging_ipc.dll component as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools, VPN Standalone allows an attacker to arbitrar...Show more
A NULL Pointer Dereference vulnerability in the messaging_ipc.dll component as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools, VPN Standalone allows an attacker to arbitrarily crash product processes and generate crashdump files. This issue affects: Bitdefender Total Security versions prior to 26.0.3.29. Bitdefender Internet Security versions prior to 26.0.3.29. Bitdefender Antivirus Plus versions prior to 26.0.3.29. Bitdefender Endpoint Security Tools versions prior to 7.2.2.92. Bitdefender VPN Standalone versions prior to 25.5.0.48.Show less
1Htmldoc Project
1Htmldoc
Jun 17, 2026
Mar 3, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Null pointer dereference in the htmldoc v1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of service via a crafted html file.
1Htmldoc Project
1Htmldoc
Jun 17, 2026
Mar 2, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A security issue was found in htmldoc v1.9.12 and before. A NULL pointer dereference in the function image_load_jpeg() in image.cxx may result in denial of service.
1Htmldoc Project
1Htmldoc
Jun 17, 2026
Mar 2, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A flaw was found in htmldoc in v1.9.12 and before. Null pointer dereference in file_extension(),in file.c may lead to execute arbitrary code and denial of service.