CWE-476
5,865 CVEs • Abstraction: Base • Likelihood of Exploit: Medium
NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.
CVEs (5,865)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the macinstring function. |
An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse endpoints function. |
An issue found in TCPReplay v.4.4.3 allows a remote attacker to cause a denial of service via the read_hexstring function at the utils.c:309 endpoint. |
3Debian LinuxNetapp7Debian Linux H300sH410c+4 moreJun 17, 2026 Mar 16, 2023 N/A· v4 7.0 HIGH· v3 N/A· v2 do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference). |
Libde265 v1.0.11 was discovered to contain a segmentation violation via the function decoder_context::process_slice_segment_header at decctx.cc. |
1Microsoft 15365 OfficeOffice Long Term Servicing Channel+12 moreJun 17, 2026 Mar 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Graphics Component Elevation of Privilege Vulnerability |
1Microsoft 12Windows 10 Windows 10 1607Windows 10 1809+9 moreJun 17, 2026 Mar 14, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
STEPTools v18SP1 ifcmesh library (v18.1) is affected due to a null pointer dereference, which could allow an attacker to deny application usage when reading a specially constructed file, resulting in an application cras...Show more |
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1402. |
The bundle management subsystem within OpenHarmony-v3.1.4 and prior versions has a null pointer reference vulnerability which local attackers can exploit this vulnerability to cause a DoS attack to the system when instal...Show more |
Communication Wi-Fi subsystem within OpenHarmony-v3.1.4 and prior versions, OpenHarmony-v3.0.7 and prior versions has a null pointer reference vulnerability which local attackers can exploit this vulnerability to cause...Show more |
radare2 v5.8.3 was discovered to contain a segmentation fault via the component wasm_dis at p/wasm/wasm.c. |
Consul and Consul Enterprise allowed an authenticated user with service:write permissions to trigger a workflow that causes Consul server and client agents to crash under certain circumstances. This vulnerability was fix...Show more |
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392. |
1Fabulatech 1Webcam For Remote Desktop Jun 17, 2026 Mar 6, 2023 N/A· v4 5.5 MEDIUM· v3 1.7 LOW· v2 A vulnerability has been found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This vulnerability affects the function 0x222010/0x222018 in the library ftwebcam.sys of the component IOCTL Ha...Show more |
NVIDIA CUDA Toolkit SDK contains a bug in cuobjdump, where a local user running the tool against an ill-formed binary may cause a null- pointer dereference, which may result in a limited denial of service.
|
In the Linux kernel before 5.15.13, drivers/net/ethernet/mellanox/mlx5/core/steering/dr_domain.c misinterprets the mlx5_get_uars_page return value (expects it to be NULL in the error case, whereas it is actually an error...Show more |
2Linux Suse2Linux Enterprise Server Linux KernelJun 17, 2026 Mar 1, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In the Linux kernel before 6.2, mm/memory-tiers.c misinterprets the alloc_memory_type return value (expects it to be NULL in the error case, whereas it is actually an error pointer). NOTE: this is disputed by third parti...Show more |
In the Linux kernel before 5.19, drivers/gpu/drm/arm/malidp_planes.c misinterprets the get_sg_table return value (expects it to be NULL in the error case, whereas it is actually an error pointer). |
In the Linux kernel before 5.16.3, drivers/bluetooth/hci_qca.c misinterprets the devm_gpiod_get_index_optional return value (expects it to be NULL in the error case, whereas it is actually an error pointer). |