← Back
CWE-476

5,438 CVEs • Abstraction: Base • Likelihood of Exploit: Medium

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

JSON object

Loading...

CVEs (5,438)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Debian
Nvidia
2Debian Linux
Gpu Display Driver
Jun 17, 2026
Jul 22, 2021
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handlers for all control calls with embedded parameters where dereferencing an untrusted pointer may lead t...Show more
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handlers for all control calls with embedded parameters where dereferencing an untrusted pointer may lead to denial of service.Show less
1Gpac
1Gpac
Jun 17, 2026
Jul 21, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in box_code_apple.c:119 in Gpac MP4Box 0.8.0, allows attackers to cause a Denial of Service due to an invalid read on function ilst_item_Read.
1Flowpaper
1Pdf2json
Jun 17, 2026
Jul 21, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue has been found in function DCTStream::getChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a NULL pointer dereference (invalid read of size 1) .
1Flowpaper
1Pdf2json
Jun 17, 2026
Jul 21, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue has been found in function EmbedStream::getChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a null pointer derefenrece (invalid read of size 8) .
1Nvidia
1Virtual Gpu
Jun 17, 2026
Jul 21, 2021
N/A· v4
4.4 MEDIUM· v3
2.1 LOW· v2
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can dereference a NULL pointer, which may lead to denial of service. This affects vGPU version 12.x (prior to 12.3), versio...Show more
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can dereference a NULL pointer, which may lead to denial of service. This affects vGPU version 12.x (prior to 12.3), version 11.x (prior to 11.5) and version 8.x (prior 8.8).Show less
1Nvidia
1Virtual Gpu
Jun 17, 2026
Jul 21, 2021
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can dereference a NULL pointer, which may lead to denial of service. This affects vGPU version 12.x (prior to 12.3), versio...Show more
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can dereference a NULL pointer, which may lead to denial of service. This affects vGPU version 12.x (prior to 12.3), version 11.x (prior to 11.5) and version 8.x (prior 8.8).Show less
1Mikrotik
1Routeros
Jun 17, 2026
Jul 14, 2021
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Mikrotik RouterOs through stable version 6.48.3 suffers from a memory corruption vulnerability in the /nova/bin/detnet process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).
1Huawei
1Harmonyos
Jun 17, 2026
Jul 14, 2021
N/A· v4
5.5 MEDIUM· v3
4.9 MEDIUM· v2
A component of the HarmonyOS 2.0 has a Null Pointer Dereference Vulnerability. Local attackers may exploit this vulnerability to cause system denial of service.
1Axiosys
1Bento4
Jun 17, 2026
Jul 13, 2021
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a direct copy to NULL pointer dereference, leading to a denial of service (DOS).
1Axiosys
1Bento4
Jun 17, 2026
Jul 13, 2021
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An unhandled memory allocation failure in Core/AP4IkmsAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service (DOS).
1Axiosys
1Bento4
Jun 17, 2026
Jul 13, 2021
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service (DOS).
1Axiosys
1Bento4
Jun 17, 2026
Jul 13, 2021
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An unhandled memory allocation failure in Core/Ap48bdlAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service (DOS).
1Mikrotik
1Routeros
Jun 17, 2026
Jul 13, 2021
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Mikrotik RouterOs before stable version 6.47 suffers from a memory corruption vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).
1Mikrotik
1Routeros
Jun 17, 2026
Jul 13, 2021
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Mikrotik RouterOs before stable version 6.47 suffers from a memory corruption vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference). NOT...Show more
Mikrotik RouterOs before stable version 6.47 suffers from a memory corruption vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference). NOTE: this is different from CVE-2020-20253 and CVE-2020-20254. All four vulnerabilities in the /nova/bin/lcdstat process are discussed in the CVE-2020-20250 github.com/cq674350529 reference.Show less
1Siemens
1Jt Utilities
Jun 17, 2026
Jul 13, 2021
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
A vulnerability has been identified in JT Utilities (All versions < V13.0.2.0). When parsing specially crafted JT files, a race condition could cause an object to be released before being operated on, leading to NULL poi...Show more
A vulnerability has been identified in JT Utilities (All versions < V13.0.2.0). When parsing specially crafted JT files, a race condition could cause an object to be released before being operated on, leading to NULL pointer deference condition and causing the application to crash. An attacker could leverage this vulnerability to cause a Denial-of-Service condition in the application.Show less
1Siemens
1Jt Utilities
Jun 17, 2026
Jul 13, 2021
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
A vulnerability has been identified in JT Utilities (All versions < V13.0.2.0). When parsing specially crafted JT files, a missing check for the validity of an iterator leads to NULL pointer deference condition, causing...Show more
A vulnerability has been identified in JT Utilities (All versions < V13.0.2.0). When parsing specially crafted JT files, a missing check for the validity of an iterator leads to NULL pointer deference condition, causing the application to crash. An attacker could leverage this vulnerability to cause a Denial-of-Service condition in the application.Show less
1Mikrotik
1Routeros
Jun 17, 2026
Jul 7, 2021
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/graphing process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).
1Mikrotik
1Routeros
Jun 17, 2026
Jul 7, 2021
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Mikrotik RouterOs 6.44.5 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/console process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).
1Linux
1Acrn
Jun 17, 2026
Jul 2, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in ACRN before 2.5. It allows a devicemodel/hw/pci/virtio/virtio_net.c virtio_net_ping_rxq NULL pointer dereference for vq->used.
1Linux
1Acrn
Jun 17, 2026
Jul 2, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
ACRN before 2.5 has a devicemodel/hw/pci/xhci.c NULL Pointer Dereference for a trb pointer.