NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

CVEs (5,440)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-41497 1Rare Technologies 1Bounter Jun 17, 2026 Dec 17, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Null pointer reference in CMS_Conservative_increment_obj in RaRe-Technologies bounter version 1.01 and 1.10, allows attackers to conduct Denial of Service attacks by inputting a huge width of hash bucket.
CVE-2021-41495 1Numpy 1Numpy Jun 17, 2026 Dec 17, 2021 N/A· v4 5.3 MEDIUM· v3 3.5 LOW· v2 Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &lt and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively cre...Show more Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &lt and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays. NOTE: While correct that validation is missing, an error can only occur due to an exhaustion of memory. If the user can exhaust memory, they are already privileged. Further, it should be practically impossible to construct an attack which can target the memory exhaustion to occur at exactly this placeShow less
CVE-2021-1022 1Google 1Android Jun 17, 2026 Dec 15, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In btif_in_hf_client_generic_evt of btif_hf_client.cc, there is a possible Bluetooth service crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed....Show more In btif_in_hf_client_generic_evt of btif_hf_client.cc, there is a possible Bluetooth service crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-180420059Show less
CVE-2021-40826 1Clementine Player 1Clementine Jun 17, 2026 Dec 15, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Clementine Music Player through 1.3.1 is vulnerable to a User Mode Write Access Violation, affecting the MP3 file parsing functionality at clementine+0x3aa207. The vulnerability is triggered when the user opens a crafted...Show more Clementine Music Player through 1.3.1 is vulnerable to a User Mode Write Access Violation, affecting the MP3 file parsing functionality at clementine+0x3aa207. The vulnerability is triggered when the user opens a crafted MP3 file or loads a remote stream URL that is mishandled by Clementine. Attackers could exploit this issue to cause a crash (DoS) of the clementine.exe process or achieve arbitrary code execution in the context of the current logged-in Windows user.Show less
CVE-2021-4110 1Mruby 1Mruby Jun 17, 2026 Dec 15, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 mruby is vulnerable to NULL Pointer Dereference
CVE-2021-37083 1Huawei 1Harmonyos Jun 17, 2026 Dec 7, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 There is a NULL Pointer Dereference vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Denial of Service Attacks.
CVE-2021-37077 1Huawei 1Harmonyos Jun 17, 2026 Dec 7, 2021 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 There is a NULL Pointer Dereference vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to kernel crash.
CVE-2021-28236 1Gnu 1Libredwg Jun 17, 2026 Dec 2, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 LibreDWG v0.12.3 was discovered to contain a NULL pointer dereference via out_dxfb.c.
CVE-2020-36135 1Aomedia 1Aomedia Jun 17, 2026 Dec 2, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component rate_hist.c.
CVE-2020-36130 1Aomedia 1Aomedia Jun 17, 2026 Dec 2, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1_dx_iface.c.
CVE-2021-43016 1Adobe 1Incopy Jun 17, 2026 Nov 22, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Adobe InCopy version 16.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an applicati...Show more Adobe InCopy version 16.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2021-42733 1Adobe 1Bridge Jun 17, 2026 Nov 22, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Adobe Bridge version 11.1.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an applica...Show more Adobe Bridge version 11.1.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2021-40774 1Adobe 1Prelude Jun 17, 2026 Nov 22, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Adobe Prelude version 10.1 (and earlier) is affected by a null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an applicat...Show more Adobe Prelude version 10.1 (and earlier) is affected by a null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2021-40773 1Adobe 1Prelude Jun 17, 2026 Nov 22, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Adobe Prelude version 10.1 (and earlier) is affected by a null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an applicat...Show more Adobe Prelude version 10.1 (and earlier) is affected by a null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2021-39921 3Debian FedoraprojectWireshark 3Debian Linux FedoraWireshark Jun 17, 2026 Nov 19, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 NULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
CVE-2021-39928 3Debian FedoraprojectWireshark 3Debian Linux FedoraWireshark Jun 17, 2026 Nov 18, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 NULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
CVE-2021-39920 2Fedoraproject Wireshark 2Fedora Wireshark Jun 17, 2026 Nov 18, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file
CVE-2021-42268 1Adobe 1Animate Jun 17, 2026 Nov 18, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Adobe Animate version 21.0.9 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted FLA file. An unauthenticated attacker could leverage this vulnerability to achieve an ap...Show more Adobe Animate version 21.0.9 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted FLA file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2021-40761 1Adobe 1After Effects Jun 17, 2026 Nov 18, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Adobe After Effects version 18.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an...Show more Adobe After Effects version 18.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2021-40756 1Adobe 1After Effects Jun 17, 2026 Nov 18, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Adobe After Effects version 18.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an...Show more Adobe After Effects version 18.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less

Previous 1...189190191...272 Next