← Back
CWE-476

5,440 CVEs • Abstraction: Base • Likelihood of Exploit: Medium

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

JSON object

Loading...

CVEs (5,440)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Nokia
1Heif
Jun 17, 2026
Sep 20, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in heif through through v3.6.2. A NULL pointer dereference exists in the function convertByteStreamToRBSP() located in nalutil.cpp. It allows an attacker to cause Denial of Service.
1Creolabs
1Gravity
Jun 17, 2026
Sep 20, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in gravity through 0.8.1. A NULL pointer dereference exists in the function list_iterator_next() located in gravity_core.c. It allows an attacker to cause Denial of Service.
1Creolabs
1Gravity
Jun 17, 2026
Sep 20, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in gravity through 0.8.1. A NULL pointer dereference exists in the function ircode_register_pop_context_protect() located in gravity_ircode.c. It allows an attacker to cause Denial of Service.
1Creolabs
1Gravity
Jun 17, 2026
Sep 20, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in gravity through 0.8.1. A NULL pointer dereference exists in the function gravity_string_to_value() located in gravity_value.c. It allows an attacker to cause Denial of Service.
1Creolabs
1Gravity
Jun 17, 2026
Sep 20, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in gravity through 0.8.1. A NULL pointer dereference exists in the function ircode_add_check() located in gravity_ircode.c. It allows an attacker to cause Denial of Service.
2Debian
Xfig Project
2Debian Linux
Fig2dev
Jun 17, 2026
Sep 20, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function compute_closed_spline() located in trans_spline.c. It allows an attacker to cause Denial of Service. The fixed version o...Show more
An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function compute_closed_spline() located in trans_spline.c. It allows an attacker to cause Denial of Service. The fixed version of fig2dev is 3.2.8.Show less
2Debian
Faad2 Project
2Debian Linux
Faad2
Jun 17, 2026
Sep 20, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in faad2 through 2.10.0. A NULL pointer dereference exists in the function get_sample() located in output.c. It allows an attacker to cause Denial of Service.
1Grame
1Faust
Jun 17, 2026
Sep 20, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in faust through v2.30.5. A NULL pointer dereference exists in the function CosPrim::computeSigOutput() located in cosprim.hh. It allows an attacker to cause Denial of Service.
1Gpac
1Gpac
Jun 17, 2026
Sep 20, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in gpac through 20200801. A NULL pointer dereference exists in the function vwid_box_del located in box_code_base.c. It allows an attacker to cause Denial of Service.
1Gpac
1Gpac
Jun 17, 2026
Sep 20, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in gpac through 20200801. A NULL pointer dereference exists in the function ilst_item_box_dump located in box_dump.c. It allows an attacker to cause Denial of Service.
1Ffmpeg
1Ffmpeg
Jun 17, 2026
Sep 20, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in function latm_write_packet in libavformat/latmenc.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts due to a Null pointer dereference.
1Qualcomm
108Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+105 more
Jun 17, 2026
Sep 17, 2021
N/A· v4
5.5 MEDIUM· v3
4.9 MEDIUM· v2
Null pointer dereference occurs due to improper validation when the preemption feature enablement is toggled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial...Show more
Null pointer dereference occurs due to improper validation when the preemption feature enablement is toggled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon WearablesShow less
8Apache
BroadcomDebian+5 more
18Brocade Fabric Operating System Firmware
Cloud BackupClustered Data Ontap+15 more
Jun 17, 2026
Sep 16, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier.
1Sap
1Commoncryptolib
Jun 17, 2026
Sep 14, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
SAP CommonCryptoLib version 8.5.38 or lower is vulnerable to null pointer dereference vulnerability when an unauthenticated attacker sends crafted malicious data in the HTTP requests over the network, this causes the SAP...Show more
SAP CommonCryptoLib version 8.5.38 or lower is vulnerable to null pointer dereference vulnerability when an unauthenticated attacker sends crafted malicious data in the HTTP requests over the network, this causes the SAP application to crash and has high impact on the availability of the SAP system.Show less
1Gpac
1Gpac
Jun 17, 2026
Sep 13, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The gf_isom_vp_config_get function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
1Gpac
1Gpac
Jun 17, 2026
Sep 13, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The DumpTrackInfo function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
1Gpac
1Gpac
Jun 17, 2026
Sep 13, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The trak_box_size function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
1Gpac
1Gpac
Jun 17, 2026
Sep 13, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The abst_box_size function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
1Gpac
1Gpac
Jun 17, 2026
Sep 13, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The gf_odf_desc_copy function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
1Google
1Android
Jun 17, 2026
Sep 9, 2021
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
NULL pointer dereference vulnerability in NPU driver prior to SMR Sep-2021 Release 1 allows attackers to cause memory corruption.