← Back
CWE-476

5,437 CVEs • Abstraction: Base • Likelihood of Exploit: Medium

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

JSON object

Loading...

CVEs (5,437)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
4Canonical
FedoraprojectLinux+1 more
4Fedora
LeapLinux Kernel+1 more
Jun 17, 2026
Sep 11, 2019
N/A· v4
4.1 MEDIUM· v3
4.7 MEDIUM· v2
drivers/net/wireless/marvell/libertas/if_sdio.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.
4Canonical
LinuxOpensuse+1 more
4Enterprise Linux
LeapLinux Kernel+1 more
Jun 17, 2026
Sep 11, 2019
N/A· v4
4.1 MEDIUM· v3
4.7 MEDIUM· v2
drivers/net/fjes/fjes_main.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.
1Linux
1Linux Kernel
Jun 17, 2026
Sep 11, 2019
N/A· v4
4.7 MEDIUM· v3
4.7 MEDIUM· v2
drivers/gpu/drm/radeon/radeon_display.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. NOTE: A third-party software maintainer states that the work queu...Show more
drivers/gpu/drm/radeon/radeon_display.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. NOTE: A third-party software maintainer states that the work queue allocation is happening during device initialization, which for a graphics card occurs during boot. It is not attacker controllable and OOM at that time is highly unlikelyShow less
3Canonical
LinuxRedhat
3Enterprise Linux
Linux KernelUbuntu Linux
Jun 17, 2026
Sep 11, 2019
N/A· v4
4.1 MEDIUM· v3
4.7 MEDIUM· v2
drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. NOTE: The security community disputes this issues as not being...Show more
drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. NOTE: The security community disputes this issues as not being serious enough to be deserving a CVE idShow less
1Digium
1Asterisk
Jun 17, 2026
Sep 9, 2019
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
res_pjsip_t38 in Sangoma Asterisk 15.x before 15.7.4 and 16.x before 16.5.1 allows an attacker to trigger a crash by sending a declined stream in a response to a T.38 re-invite initiated by Asterisk. The crash occurs bec...Show more
res_pjsip_t38 in Sangoma Asterisk 15.x before 15.7.4 and 16.x before 16.5.1 allows an attacker to trigger a crash by sending a declined stream in a response to a T.38 re-invite initiated by Asterisk. The crash occurs because of a NULL session media object dereference.Show less
1Myhtml Project
1Myhtml
Jun 17, 2026
Sep 9, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
MyHTML through 4.0.5 has a NULL pointer dereference in myhtml_tree_node_remove in tree.c.
1K Takata
1Onigmo
Jun 17, 2026
Sep 9, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Onigmo through 6.2.0 has a NULL pointer dereference in onig_error_code_to_str because of fetch_token in regparse.c.
2Canonical
Symonics
2Libmysofa
Ubuntu Linux
Jun 17, 2026
Sep 8, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Symonics libmysofa 0.7 has a NULL pointer dereference in getHrtf in hrtf/reader.c.
1Linux
1Linux Kernel
Jun 17, 2026
Sep 6, 2019
N/A· v4
4.1 MEDIUM· v3
4.7 MEDIUM· v2
An issue was discovered in the Linux kernel through 5.2.13. nbd_genl_status in drivers/block/nbd.c does not check the nla_nest_start_noflag return value.
1Linux
1Linux Kernel
Jun 17, 2026
Sep 4, 2019
N/A· v4
5.5 MEDIUM· v3
4.9 MEDIUM· v2
An issue was discovered in the Linux kernel before 5.0.11. fm10k_init_module in drivers/net/ethernet/intel/fm10k/fm10k_main.c has a NULL pointer dereference because there is no -ENOMEM upon an alloc_workqueue failure.
1Linux
1Linux Kernel
Jun 17, 2026
Sep 4, 2019
N/A· v4
5.5 MEDIUM· v3
4.9 MEDIUM· v2
An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a cd data structure if alloc_disk fails in drivers/block/paride/pf.c.
1Linux
1Linux Kernel
Jun 17, 2026
Sep 4, 2019
N/A· v4
5.5 MEDIUM· v3
4.9 MEDIUM· v2
An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a pf data structure if alloc_disk fails in drivers/block/paride/pf.c.
1Glyphandcog
1Xpdfreader
Jun 17, 2026
Sep 3, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Xpdf 2.00 allows a SIGSEGV in XRef::constructXRef in XRef.cc. NOTE: 2.00 is a version from November 2002.
2Debian
Videolan
2Debian Linux
Vlc Media Player
Jun 17, 2026
Aug 29, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
In VideoLAN VLC media player 3.0.7.1, there is a NULL pointer dereference at the function SeekPercent of demux/asf/asf.c that will lead to a denial of service attack.
1Webassembly
1Binaryen
Jun 17, 2026
Aug 29, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in Binaryen 1.38.32. Two visitors in ir/ExpressionManipulator.cpp can lead to a NULL pointer dereference in wasm::LocalSet::finalize in wasm/wasm.cpp. A crafted input can cause segmentation faults...Show more
An issue was discovered in Binaryen 1.38.32. Two visitors in ir/ExpressionManipulator.cpp can lead to a NULL pointer dereference in wasm::LocalSet::finalize in wasm/wasm.cpp. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by wasm2js.Show less
1Libmirage Project
1Libmirage
Jun 17, 2026
Aug 29, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
libMirage 3.2.2 in CDemu has a NULL pointer dereference in the NRG parser in parser.c.
1Cisco
2Integrated Management Controller Supervisor
Unified Computing System
Jun 17, 2026
Aug 21, 2019
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to cause the web server process to crash, causing a denial of service (DoS) condition on a...Show more
A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to cause the web server process to crash, causing a denial of service (DoS) condition on an affected system. The vulnerability is due to insufficient validation of user-supplied input on the web interface. An attacker could exploit this vulnerability by submitting a crafted HTTP request to certain endpoints of the affected software. A successful exploit could allow an attacker to cause the web server to crash. Physical access to the device may be required for a restart.Show less
1Linux
1Linux Kernel
Jun 17, 2026
Aug 20, 2019
N/A· v4
4.6 MEDIUM· v3
4.9 MEDIUM· v2
An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop-usb.c driver.
3Canonical
LinuxNetapp
7Active Iq Unified Manager
Data Availability ServicesH410c Firmware+4 more
Jun 17, 2026
Aug 19, 2019
N/A· v4
4.6 MEDIUM· v3
4.9 MEDIUM· v2
An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/driver.c driver.
3Linux
NetappOpensuse
7Active Iq Unified Manager
Data Availability ServicesH410c Firmware+4 more
Jun 17, 2026
Aug 19, 2019
N/A· v4
4.6 MEDIUM· v3
4.9 MEDIUM· v2
An issue was discovered in the Linux kernel before 5.2.8. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/helper.c (motu_microbookii) driver.