← Back
CWE-476

5,863 CVEs • Abstraction: Base • Likelihood of Exploit: Medium

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

JSON object

Loading...

CVEs (5,863)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Codesys
Wago
28750 8202 Firmware
750 8203 Firmware750 8204 Firmware+25 more
Jun 17, 2026
Oct 26, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests may cause a Null pointer dereference in the CODESYS web server and may result in a denial-of-service condition.
1Trendmicro
3Apex One
Worry Free Business SecurityWorry Free Business Security Services
Jun 17, 2026
Oct 21, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A null pointer vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an attacker to crash the CGI program on affected installations.
1Qualcomm
122Apq8009w Firmware
Apq8017 FirmwareApq8053 Firmware+119 more
Jun 17, 2026
Oct 20, 2021
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
Null pointer dereference can occur due to lack of null check for user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearabl...Show more
Null pointer dereference can occur due to lack of null check for user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon WearablesShow less
1Qualcomm
84Apq8017 Firmware
Apq8053 FirmwareAqt1000 Firmware+81 more
Jun 17, 2026
Oct 20, 2021
N/A· v4
8.4 HIGH· v3
7.2 HIGH· v2
Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Wearables
2Adobe
Debian
2Debian Linux
Xmp Toolkit Software Development Kit
Jun 17, 2026
Oct 13, 2021
N/A· v4
6.1 MEDIUM· v3
5.8 MEDIUM· v2
XMP Toolkit version 2020.1 (and earlier) is affected by a null pointer dereference vulnerability that could result in leaking data from certain memory locations and causing a local denial of service in the context of the...Show more
XMP Toolkit version 2020.1 (and earlier) is affected by a null pointer dereference vulnerability that could result in leaking data from certain memory locations and causing a local denial of service in the context of the current user. User interaction is required to exploit this vulnerability in that the victim will need to open a specially crafted MXF file.Show less
1Zephyrproject
1Zephyr
Jun 17, 2026
Oct 12, 2021
N/A· v4
6.5 MEDIUM· v3
3.3 LOW· v2
Unexpected Pointer Aliasing in IEEE 802154 Fragment Reassembly in Zephyr. Zephyr versions >= >=2.4.0 contain NULL Pointer Dereference (CWE-476). For more information, see https://github.com/zephyrproject-rtos/zephyr/secu...Show more
Unexpected Pointer Aliasing in IEEE 802154 Fragment Reassembly in Zephyr. Zephyr versions >= >=2.4.0 contain NULL Pointer Dereference (CWE-476). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-p86r-gc4r-4mq3Show less
1Gpac
1Gpac
Jun 17, 2026
Oct 12, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in gpac 0.8.0. An invalid memory dereference exists in the function FixTrackID located in isom_intern.c, which allows attackers to cause a denial of service (DoS) via a crafted input.
3Debian
NetappSamba
5Debian Linux
Management Services For Element SoftwareManagement Services For Netapp Hci+2 more
Jun 17, 2026
Oct 12, 2021
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba server.
1Google
1Android
Jun 17, 2026
Oct 6, 2021
N/A· v4
4.4 MEDIUM· v3
2.1 LOW· v2
A vulnerability in mfc driver prior to SMR Oct-2021 Release 1 allows memory corruption via NULL-pointer dereference.
1Zephyrproject
1Zephyr
Jun 17, 2026
Oct 5, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
DOS: Incorrect 802154 Frame Validation for Omitted Source / Dest Addresses. Zephyr versions >= > v2.4.0 contain NULL Pointer Dereference (CWE-476), Attempt to Access Child of a Non-structure Pointer (CWE-588). For more i...Show more
DOS: Incorrect 802154 Frame Validation for Omitted Source / Dest Addresses. Zephyr versions >= > v2.4.0 contain NULL Pointer Dereference (CWE-476), Attempt to Access Child of a Non-structure Pointer (CWE-588). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-94jg-2p6q-5364Show less
4Apache
FedoraprojectNetapp+1 more
4Cloud Backup
FedoraHttp Server+1 more
Jun 17, 2026
Oct 5, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. The vulnerability wa...Show more
While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. The vulnerability was recently introduced in version 2.4.49. No exploit is known to the project.Show less
1Adobe
4Acrobat
Acrobat DcAcrobat Reader+1 more
Jun 17, 2026
Sep 29, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Acrobat Pro DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage thi...Show more
Acrobat Pro DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive user memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
4Acrobat
Acrobat DcAcrobat Reader+1 more
Jun 17, 2026
Sep 29, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage...Show more
Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
4Acrobat
Acrobat DcAcrobat Reader+1 more
Jun 17, 2026
Sep 29, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage...Show more
Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
4Acrobat
Acrobat DcAcrobat Reader+1 more
Jun 17, 2026
Sep 29, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage...Show more
Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
4Acrobat
Acrobat DcAcrobat Reader+1 more
Jun 17, 2026
Sep 29, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage...Show more
Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
4Acrobat
Acrobat DcAcrobat Reader+1 more
Jun 17, 2026
Sep 29, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage...Show more
Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Adobe
4Acrobat
Acrobat DcAcrobat Reader+1 more
Jun 17, 2026
Sep 29, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage...Show more
Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Aveva
1Suitelink
Jun 17, 2026
Sep 23, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Null pointer dereference in SuiteLink server while processing command 0x0b
1Aveva
1Suitelink
Jun 17, 2026
Sep 23, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Null pointer dereference in SuiteLink server while processing commands 0x04/0x0a