← Back
CWE-476

5,437 CVEs • Abstraction: Base • Likelihood of Exploit: Medium

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

JSON object

Loading...

CVEs (5,437)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Debian
Qemu
2Debian Linux
Qemu
Jun 17, 2026
Jul 2, 2020
N/A· v4
2.3 LOW· v3
2.1 LOW· v2
In QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback methods, leading to a NULL pointer dereference.
3Fedoraproject
OpenexrOpensuse
3Fedora
LeapOpenexr
Jun 17, 2026
Jun 26, 2020
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
An issue was discovered in OpenEXR before 2.5.2. An invalid tiled input file could cause invalid memory access in TiledInputFile::TiledInputFile() in IlmImf/ImfTiledInputFile.cpp, as demonstrated by a NULL pointer derefe...Show more
An issue was discovered in OpenEXR before 2.5.2. An invalid tiled input file could cause invalid memory access in TiledInputFile::TiledInputFile() in IlmImf/ImfTiledInputFile.cpp, as demonstrated by a NULL pointer dereference.Show less
1Adobe
2Acrobat Dc
Acrobat Reader Dc
Jun 17, 2026
Jun 25, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have a null pointer vulnerability. Successful exploitation could lead t...Show more
Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have a null pointer vulnerability. Successful exploitation could lead to application denial-of-service.Show less
1Nvidia
1Gpu Display Driver
Jun 17, 2026
Jun 25, 2020
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, in which a NULL pointer is dereferenced, leading to denial of service or potent...Show more
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, in which a NULL pointer is dereferenced, leading to denial of service or potential escalation of privileges.Show less
3Canonical
OpensuseSane Project
3Leap
Sane BackendsUbuntu Linux
Jun 17, 2026
Jun 24, 2020
N/A· v4
5.7 MEDIUM· v3
2.7 LOW· v2
A NULL pointer dereference in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, GHSL-2020-079.
1Qualcomm
37Apq8009 Firmware
Apq8017 FirmwareApq8053 Firmware+34 more
Jun 17, 2026
Jun 22, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Sn...Show more
Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996, MSM8996AU, MSM8998, QCA6574AU, QCS405, QCS605, QM215, Rennell, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR2130Show less
1Qualcomm
44Apq8009 Firmware
Apq8017 FirmwareApq8053 Firmware+41 more
Jun 17, 2026
Jun 22, 2020
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Sn...Show more
Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, QCA6574AU, QCS405, QCS605, QM215, Rennell, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130Show less
2Fedoraproject
Gnu
2Adns
Fedora
Nov 21, 2024
Jun 18, 2020
N/A· v4
8.8 HIGH· v3
7.5 HIGH· v2
An issue was discovered in adns before 1.5.2. It corrupts a pointer when a nameserver speaks first because of a wrong number of pointer dereferences. This bug may well be exploitable as a remote code execution.
5Canonical
DebianLibvnc Project+2 more
10Debian Linux
LeapLibvncserver+7 more
Jun 17, 2026
Jun 17, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rfbregion.c has a NULL pointer dereference.
4Canonical
DebianLibvnc Project+1 more
9Debian Linux
LibvncserverSimatic Itc1500 Firmware+6 more
Jun 17, 2026
Jun 17, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in LibVNCServer before 0.9.13. libvncclient/tls_openssl.c has a NULL pointer dereference.
1Troglobit
1Uftpd
Jun 17, 2026
Jun 15, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In uftpd before 2.12, handle_CWD in ftpcmd.c mishandled the path provided by the user, causing a NULL pointer dereference and denial of service, as demonstrated by a CWD /.. command.
1Google
1Android
Jun 17, 2026
Jun 11, 2020
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
In onCreate of SliceDeepLinkSpringBoard.java there is a possible insecure Intent. This could lead to local elevation of privilege with no additional execution privileges needed. User interaction is not needed for exploit...Show more
In onCreate of SliceDeepLinkSpringBoard.java there is a possible insecure Intent. This could lead to local elevation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-122836081Show less
1Meetecho
1Janus
Jun 17, 2026
Jun 10, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_preparse in sdp.c has a NULL pointer dereference.
1Meetecho
1Janus
Jun 17, 2026
Jun 10, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_process in sdp.c has a NULL pointer dereference.
2Debian
Libupnp Project
2Debian Linux
Libupnp
Jun 17, 2026
Jun 4, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Portable UPnP SDK (aka libupnp) 1.12.1 and earlier allows remote attackers to cause a denial of service (crash) via a crafted SSDP message due to a NULL pointer dereference in the functions FindServiceControlURLPath and...Show more
Portable UPnP SDK (aka libupnp) 1.12.1 and earlier allows remote attackers to cause a denial of service (crash) via a crafted SSDP message due to a NULL pointer dereference in the functions FindServiceControlURLPath and FindServiceEventURLPath in genlib/service_table/service_table.c.Show less
1Foxitsoftware
2Phantompdf
Reader
Jun 17, 2026
Jun 4, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a NULL pointer dereference via FXSYS_wcslen in an Epub file.
1Foxitsoftware
2Phantompdf
Reader
Jun 17, 2026
Jun 4, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It has a NULL pointer dereference.
1Foxitsoftware
1Phantompdf
Jun 17, 2026
Jun 4, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in Foxit PhantomPDF before 8.3.11. It has a NULL pointer dereference via FXSYS_wcslen in an Epub file.
1Foxitsoftware
1Reader
Nov 21, 2024
Jun 4, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in Foxit Reader before 2.4.4. It has a NULL pointer dereference.
1Foxitsoftware
1Phantompdf
Jun 17, 2026
Jun 4, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in Foxit PhantomPDF Mac before 3.4. It has a NULL pointer dereference.