NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

CVEs (5,863)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-23021 1F5 11Big Ip Access Policy Manager Big Ip Advanced Firewall ManagerBig Ip Analytics+8 more Jun 17, 2026 Jan 25, 2022 N/A· v4 7.5 HIGH· v3 7.1 HIGH· v2 On BIG-IP version 16.1.x before 16.1.2, when any of the following configurations are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate: HTTP redirect rul...Show more On BIG-IP version 16.1.x before 16.1.2, when any of the following configurations are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate: HTTP redirect rule in an LTM policy, BIG-IP APM Access Profile, and Explicit HTTP Proxy in HTTP Profile. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.Show less
CVE-2022-23020 1F5 11Big Ip Access Policy Manager Big Ip Advanced Firewall ManagerBig Ip Analytics+8 more Jun 17, 2026 Jan 25, 2022 N/A· v4 7.5 HIGH· v3 7.1 HIGH· v2 On BIG-IP version 16.1.x before 16.1.2, when the 'Respond on Error' setting is enabled on the Request Logging profile and configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel...Show more On BIG-IP version 16.1.x before 16.1.2, when the 'Respond on Error' setting is enabled on the Request Logging profile and configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.Show less
CVE-2022-23017 1F5 11Big Ip Access Policy Manager Big Ip Advanced Firewall ManagerBig Ip Analytics+8 more Jun 17, 2026 Jan 25, 2022 N/A· v4 7.5 HIGH· v3 7.1 HIGH· v2 On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x, when a virtual server is configured with a DNS profile with the Rapid Response Mode setting enabled and is...Show more On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x, when a virtual server is configured with a DNS profile with the Rapid Response Mode setting enabled and is configured on a BIG-IP system, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.Show less
CVE-2022-23016 1F5 11Big Ip Access Policy Manager Big Ip Advanced Firewall ManagerBig Ip Analytics+8 more Jun 17, 2026 Jan 25, 2022 N/A· v4 7.5 HIGH· v3 7.1 HIGH· v2 On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP SSL Forward Proxy with TLS 1.3 is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to termin...Show more On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP SSL Forward Proxy with TLS 1.3 is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.Show less
CVE-2021-4145 2Qemu Redhat 2Enterprise Linux Qemu Jun 17, 2026 Jan 25, 2022 N/A· v4 6.5 MEDIUM· v3 4.9 MEDIUM· v2 A NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to 6.2.0. The `self` pointer is dereferenced in mirror_wait_on_conflicts() without ensuring that it's not NULL. A malicious u...Show more A NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to 6.2.0. The `self` pointer is dereferenced in mirror_wait_on_conflicts() without ensuring that it's not NULL. A malicious unprivileged user within the guest could use this flaw to crash the QEMU process on the host when writing data reaches the threshold of mirroring node.Show less
CVE-2021-45847 1Slic3r 1Slic3r Jun 17, 2026 Jan 25, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Several missing input validations in the 3MF parser component of Slic3r libslic3r 1.3.0 can each allow an attacker to cause an application crash using a crafted 3MF input file.
CVE-2021-45846 1Slic3r 1Slic3r Jun 17, 2026 Jan 25, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A flaw in the AMF parser of Slic3r libslic3r 1.3.0 allows an attacker to cause an application crash using a crafted AMF document, where a metadata tag lacks a "type" attribute.
CVE-2021-45343 3Debian FedoraprojectLibrecad 3Debian Linux FedoraLibrecad Jun 17, 2026 Jan 25, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 In LibreCAD 2.2.0, a NULL pointer dereference in the HATCH handling of libdxfrw allows an attacker to crash the application using a crafted DXF document.
CVE-2021-45340 2Libsixel Libsixel Project 2Libsixel Libsixel Jun 17, 2026 Jan 25, 2022 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 In Libsixel prior to and including v1.10.3, a NULL pointer dereference in the stb_image.h component of libsixel allows attackers to cause a denial of service (DOS) via a crafted PICT file.
CVE-2021-46311 1Gpac 1Gpac Jun 17, 2026 Jan 21, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_sg_destroy_routes () at scenegraph/vrml_route.c. This vulnerability can lead to a Denial of Service (DoS).
CVE-2021-46243 1Hdfgroup 1Hdf5 Jun 17, 2026 Jan 21, 2022 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 An untrusted pointer dereference vulnerability exists in HDF5 v1.13.1-1 via the function H5O__dtype_decode_helper () at hdf5/src/H5Odtype.c. This vulnerability can lead to a Denial of Service (DoS).
CVE-2021-46240 1Gpac 1Gpac Jun 17, 2026 Jan 21, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_dump_vrml_sffield () at scene_manager/scene_dump.c. This vulnerability can lead to a Denial of Service (DoS).
CVE-2021-46237 1Gpac 1Gpac Jun 17, 2026 Jan 21, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An untrusted pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_node_unregister () at scenegraph/base_scenegraph.c. This vulnerability can lead to a Denial of Service (DoS).
CVE-2021-46236 1Gpac 1Gpac Jun 17, 2026 Jan 21, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_sg_vrml_field_pointer_del () at scenegraph/vrml_tools.c. This vulnerability can lead to a Denial of Service (DoS).
CVE-2021-46234 1Gpac 1Gpac Jun 17, 2026 Jan 21, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_node_unregister () at scenegraph/base_scenegraph.c. This vulnerability can lead to a Denial of Service (DoS).
CVE-2022-0326 1Mruby 1Mruby Jun 17, 2026 Jan 21, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 NULL Pointer Dereference in Homebrew mruby prior to 3.2.
CVE-2021-46335 1Moddable 1Moddable Sdk Jun 17, 2026 Jan 20, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Moddable SDK v11.5.0 was discovered to contain a NULL pointer dereference in the component fx_Function_prototype_hasInstance.
CVE-2021-38786 1Allwinnertech 1Android Q Sdk Jun 17, 2026 Jan 19, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 There is a NULL pointer dereference in media/libcedarc/vdecoder of Allwinner R818 SoC Android Q SDK V1.0, which could cause a media crash (denial of service).
CVE-2021-34406 1Nvidia 1Shield Experience Jun 17, 2026 Jan 18, 2022 N/A· v4 4.7 MEDIUM· v3 4.7 MEDIUM· v2 NVIDIA Tegra kernel driver contains a vulnerability in NVHost, where a specific race condition can lead to a null pointer dereference, which may lead to a system reboot.
CVE-2021-38785 1Allwinnertech 1Android Q Sdk Jun 17, 2026 Jan 18, 2022 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 There is a NULL pointer deference in the Allwinner R818 SoC Android Q SDK V1.0 camera driver /dev/cedar_dev that could use the ioctl cmd IOCTL_GET_IOMMU_ADDR to cause a system crash.

Previous 1...206207208...294 Next