NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

CVEs (5,865)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-23259 1Jsish 1Jsish Jun 17, 2026 Apr 4, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the Jsi_Strlen function in the src/jsiChar.c file.
CVE-2023-26916 2Cesnet Fedoraproject 2Fedora Libyang Jun 17, 2026 Apr 3, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lys_parse_mem at lys_parse_mem.c.
CVE-2023-28625 1Openidc 1Mod Auth Openidc Jun 17, 2026 Apr 3, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 mod_auth_openidc is an authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. In versions 2.0.0 through 2.4.13.1, when `OIDCStripCookies` is...Show more mod_auth_openidc is an authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. In versions 2.0.0 through 2.4.13.1, when `OIDCStripCookies` is set and a crafted cookie supplied, a NULL pointer dereference would occur, resulting in a segmentation fault. This could be used in a Denial-of-Service attack and thus presents an availability risk. Version 2.4.13.2 contains a patch for this issue. As a workaround, avoid using `OIDCStripCookies`.Show less
CVE-2023-0197 1Nvidia 1Virtual Gpu Jun 17, 2026 Apr 1, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious user in a guest VM can cause a NULL-pointer dereference, which may lead to denial of service.
CVE-2022-44369 1Nasm 1Netwide Assembler Jun 17, 2026 Mar 29, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 NASM 2.16 (development) is vulnerable to 476: Null Pointer Dereference via output/outaout.c.
CVE-2022-44368 1Nasm 1Netwide Assembler Jun 17, 2026 Mar 29, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 NASM v2.16 was discovered to contain a null pointer deference in the NASM component
CVE-2022-3116 1Heimdal Project 1Heimdal Jun 17, 2026 Mar 27, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 The Heimdal Software Kerberos 5 implementation is vulnerable to a null pointer dereferance. An attacker with network access to an application that depends on the vulnerable code path can cause the application to crash.
CVE-2023-1631 1Jiangmin 1Jiangmin Antivirus Jun 17, 2026 Mar 25, 2023 N/A· v4 5.5 MEDIUM· v3 4.6 MEDIUM· v2 A vulnerability, which was classified as problematic, was found in JiangMin Antivirus 16.2.2022.418. This affects the function 0x222010 in the library kvcore.sys of the component IOCTL Handler. The manipulation leads to...Show more A vulnerability, which was classified as problematic, was found in JiangMin Antivirus 16.2.2022.418. This affects the function 0x222010 in the library kvcore.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-224013 was assigned to this vulnerability.Show less
CVE-2023-1628 1Jiangmin 1Jiangmin Antivirus Jun 17, 2026 Mar 25, 2023 N/A· v4 5.5 MEDIUM· v3 4.6 MEDIUM· v2 A vulnerability classified as problematic has been found in Jianming Antivirus 16.2.2022.418. Affected is an unknown function in the library kvcore.sys of the component IoControlCode Handler. The manipulation leads to nu...Show more A vulnerability classified as problematic has been found in Jianming Antivirus 16.2.2022.418. Affected is an unknown function in the library kvcore.sys of the component IoControlCode Handler. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. VDB-224010 is the identifier assigned to this vulnerability.Show less
CVE-2023-25676 1Google 1Tensorflow Jun 17, 2026 Mar 25, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 TensorFlow is an open source machine learning platform. When running versions prior to 2.12.0 and 2.11.1 with XLA, `tf.raw_ops.ParallelConcat` segfaults with a nullptr dereference when given a parameter `shape` with rank...Show more TensorFlow is an open source machine learning platform. When running versions prior to 2.12.0 and 2.11.1 with XLA, `tf.raw_ops.ParallelConcat` segfaults with a nullptr dereference when given a parameter `shape` with rank that is not greater than zero. A fix is available in TensorFlow 2.12.0 and 2.11.1.Show less
CVE-2023-25674 1Google 1Tensorflow Jun 17, 2026 Mar 25, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 TensorFlow is an open source machine learning platform. Versions prior to 2.12.0 and 2.11.1 have a null pointer error in RandomShuffle with XLA enabled. A fix is included in TensorFlow 2.12.0 and 2.11.1.
CVE-2023-25672 1Google 1Tensorflow Jun 17, 2026 Mar 25, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 TensorFlow is an open source platform for machine learning. The function `tf.raw_ops.LookupTableImportV2` cannot handle scalars in the `values` parameter and gives an NPE. A fix is included in TensorFlow version 2.12.0 a...Show more TensorFlow is an open source platform for machine learning. The function `tf.raw_ops.LookupTableImportV2` cannot handle scalars in the `values` parameter and gives an NPE. A fix is included in TensorFlow version 2.12.0 and version 2.11.1. Show less
CVE-2023-25670 1Google 1Tensorflow Jun 17, 2026 Mar 25, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a null point error in QuantizedMatMulWithBiasAndDequantize with MKL enabled. A fix is included in TensorFlow version 2....Show more TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a null point error in QuantizedMatMulWithBiasAndDequantize with MKL enabled. A fix is included in TensorFlow version 2.12.0 and version 2.11.1. Show less
CVE-2023-25665 1Google 1Tensorflow Jun 17, 2026 Mar 25, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when `SparseSparseMaximum` is given invalid sparse tensors as inputs, it can give a null pointer error. A fix is included i...Show more TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when `SparseSparseMaximum` is given invalid sparse tensors as inputs, it can give a null pointer error. A fix is included in TensorFlow version 2.12 and version 2.11.1.Show less
CVE-2023-25663 1Google 1Tensorflow Jun 17, 2026 Mar 25, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when `ctx->step_containter()` is a null ptr, the Lookup function will be executed with a null pointer. A fix is included in...Show more TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when `ctx->step_containter()` is a null ptr, the Lookup function will be executed with a null pointer. A fix is included in TensorFlow 2.12.0 and 2.11.1.Show less
CVE-2023-25660 1Google 1Tensorflow Jun 17, 2026 Mar 25, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when the parameter `summarize` of `tf.raw_ops.Print` is zero, the new method `SummarizeArray<bool>` will reference to a nul...Show more TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when the parameter `summarize` of `tf.raw_ops.Print` is zero, the new method `SummarizeArray<bool>` will reference to a nullptr, leading to a seg fault. A fix is included in TensorFlow version 2.12 and version 2.11.1. Show less
CVE-2023-1583 1Linux 1Linux Kernel Jun 17, 2026 Mar 24, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A NULL pointer dereference was found in io_file_bitmap_get in io_uring/filetable.c in the io_uring sub-component in the Linux Kernel. When fixed files are unregistered, some context information (file_alloc_{start,end} an...Show more A NULL pointer dereference was found in io_file_bitmap_get in io_uring/filetable.c in the io_uring sub-component in the Linux Kernel. When fixed files are unregistered, some context information (file_alloc_{start,end} and alloc_hint) is not cleared. A subsequent request that has auto index selection enabled via IORING_FILE_INDEX_ALLOC can cause a NULL pointer dereference. An unprivileged user can use the flaw to cause a system crash.Show less
CVE-2023-1446 1Watchdog 1Anti Virus Jun 17, 2026 Mar 17, 2023 N/A· v4 5.5 MEDIUM· v3 4.6 MEDIUM· v2 A vulnerability classified as problematic was found in Watchdog Anti-Virus 1.4.214.0. Affected by this vulnerability is the function 0x80002004/0x80002008 in the library wsdk-driver.sys of the component IoControlCode Han...Show more A vulnerability classified as problematic was found in Watchdog Anti-Virus 1.4.214.0. Affected by this vulnerability is the function 0x80002004/0x80002008 in the library wsdk-driver.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223291.Show less
CVE-2023-1444 1Filseclab 1Twister Antivirus Jun 17, 2026 Mar 17, 2023 N/A· v4 6.5 MEDIUM· v3 7.8 HIGH· v2 A vulnerability was found in Filseclab Twister Antivirus 8. It has been rated as critical. This issue affects the function 0x8011206B in the library fildds.sys of the component IoControlCode Handler. The manipulation lea...Show more A vulnerability was found in Filseclab Twister Antivirus 8. It has been rated as critical. This issue affects the function 0x8011206B in the library fildds.sys of the component IoControlCode Handler. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223289 was assigned to this vulnerability.Show less
CVE-2023-27787 1Broadcom 1Tcpreplay Jun 17, 2026 Mar 16, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse_list function at the list.c:81 endpoint.

Previous 1...185186187...294 Next