← Back
CWE-476

5,863 CVEs • Abstraction: Base • Likelihood of Exploit: Medium

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

JSON object

Loading...

CVEs (5,863)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Ecobee
1Ecobee3 Lite Firmware
Jun 17, 2026
Aug 3, 2021
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
A NULL pointer dereference vulnerability exists on the ecobee3 lite 4.5.81.200 device in the HomeKit Wireless Access Control setup process. A threat actor can exploit this vulnerability to cause a denial of service, forc...Show more
A NULL pointer dereference vulnerability exists on the ecobee3 lite 4.5.81.200 device in the HomeKit Wireless Access Control setup process. A threat actor can exploit this vulnerability to cause a denial of service, forcing the device to reboot via a crafted HTTP request.Show less
1Videolan
1Vlc Media Player
Jun 17, 2026
Jul 26, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A NULL-pointer dereference in "Open" in avi.c of VideoLAN VLC Media Player 3.0.11 can a denial of service (DOS) in the application.
4Debian
MitNetapp+1 more
7Active Iq Unified Manager
Debian LinuxKerberos 5+4 more
Oct 14, 2026
Jul 22, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash. Thi...Show more
ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash. This occurs because a return value is not properly managed in a certain situation.Show less
1Mitsubishielectric
3Fx3u Enet L Firmware
Fx3u Enet P502 FirmwareFx3u Enet Firmware
Jun 17, 2026
Jul 22, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
NULL Pointer Dereference in MELSEC-F Series FX3U-ENET firmware version 1.14 and prior, FX3U-ENET-L firmware version 1.14 and prior and FX3U-ENET-P502 firmware version 1.14 and prior allows a remote unauthenticated attack...Show more
NULL Pointer Dereference in MELSEC-F Series FX3U-ENET firmware version 1.14 and prior, FX3U-ENET-L firmware version 1.14 and prior and FX3U-ENET-P502 firmware version 1.14 and prior allows a remote unauthenticated attacker to cause a DoS condition in communication by sending specially crafted packets. Control by MELSEC-F series PLC is not affected and system reset is required for recovery.Show less
1Nvidia
1Gpu Display Driver
Jun 17, 2026
Jul 22, 2021
N/A· v4
5.5 MEDIUM· v3
4.9 MEDIUM· v2
NVIDIA Windows GPU Display Driver for Windows contains a vulnerability in the NVIDIA kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where dereferencing a NULL pointer may lead to a system crash.
2Debian
Nvidia
2Debian Linux
Gpu Display Driver
Jun 17, 2026
Jul 22, 2021
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handlers for all control calls with embedded parameters where dereferencing an untrusted pointer may lead t...Show more
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handlers for all control calls with embedded parameters where dereferencing an untrusted pointer may lead to denial of service.Show less
1Gpac
1Gpac
Jun 17, 2026
Jul 21, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in box_code_apple.c:119 in Gpac MP4Box 0.8.0, allows attackers to cause a Denial of Service due to an invalid read on function ilst_item_Read.
1Flowpaper
1Pdf2json
Jun 17, 2026
Jul 21, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue has been found in function DCTStream::getChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a NULL pointer dereference (invalid read of size 1) .
1Flowpaper
1Pdf2json
Jun 17, 2026
Jul 21, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue has been found in function EmbedStream::getChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a null pointer derefenrece (invalid read of size 8) .
1Nvidia
1Virtual Gpu
Jun 17, 2026
Jul 21, 2021
N/A· v4
4.4 MEDIUM· v3
2.1 LOW· v2
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can dereference a NULL pointer, which may lead to denial of service. This affects vGPU version 12.x (prior to 12.3), versio...Show more
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can dereference a NULL pointer, which may lead to denial of service. This affects vGPU version 12.x (prior to 12.3), version 11.x (prior to 11.5) and version 8.x (prior 8.8).Show less
1Nvidia
1Virtual Gpu
Jun 17, 2026
Jul 21, 2021
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can dereference a NULL pointer, which may lead to denial of service. This affects vGPU version 12.x (prior to 12.3), versio...Show more
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can dereference a NULL pointer, which may lead to denial of service. This affects vGPU version 12.x (prior to 12.3), version 11.x (prior to 11.5) and version 8.x (prior 8.8).Show less
1Mikrotik
1Routeros
Jun 17, 2026
Jul 14, 2021
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Mikrotik RouterOs through stable version 6.48.3 suffers from a memory corruption vulnerability in the /nova/bin/detnet process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).
1Huawei
1Harmonyos
Jun 17, 2026
Jul 14, 2021
N/A· v4
5.5 MEDIUM· v3
4.9 MEDIUM· v2
A component of the HarmonyOS 2.0 has a Null Pointer Dereference Vulnerability. Local attackers may exploit this vulnerability to cause system denial of service.
1Axiosys
1Bento4
Jun 17, 2026
Jul 13, 2021
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a direct copy to NULL pointer dereference, leading to a denial of service (DOS).
1Axiosys
1Bento4
Jun 17, 2026
Jul 13, 2021
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An unhandled memory allocation failure in Core/AP4IkmsAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service (DOS).
1Axiosys
1Bento4
Jun 17, 2026
Jul 13, 2021
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service (DOS).
1Axiosys
1Bento4
Jun 17, 2026
Jul 13, 2021
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An unhandled memory allocation failure in Core/Ap48bdlAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service (DOS).
1Mikrotik
1Routeros
Jun 17, 2026
Jul 13, 2021
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Mikrotik RouterOs before stable version 6.47 suffers from a memory corruption vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).
1Mikrotik
1Routeros
Jun 17, 2026
Jul 13, 2021
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Mikrotik RouterOs before stable version 6.47 suffers from a memory corruption vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference). NOT...Show more
Mikrotik RouterOs before stable version 6.47 suffers from a memory corruption vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference). NOTE: this is different from CVE-2020-20253 and CVE-2020-20254. All four vulnerabilities in the /nova/bin/lcdstat process are discussed in the CVE-2020-20250 github.com/cq674350529 reference.Show less
1Siemens
1Jt Utilities
Jun 17, 2026
Jul 13, 2021
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
A vulnerability has been identified in JT Utilities (All versions < V13.0.2.0). When parsing specially crafted JT files, a race condition could cause an object to be released before being operated on, leading to NULL poi...Show more
A vulnerability has been identified in JT Utilities (All versions < V13.0.2.0). When parsing specially crafted JT files, a race condition could cause an object to be released before being operated on, leading to NULL pointer deference condition and causing the application to crash. An attacker could leverage this vulnerability to cause a Denial-of-Service condition in the application.Show less