CWE-476
5,437 CVEs • Abstraction: Base • Likelihood of Exploit: Medium
NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.
CVEs (5,437)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
4Canonical FedoraprojectLinux+1 more4Fedora LeapLinux Kernel+1 moreJun 17, 2026 Sep 11, 2019 N/A· v4 4.1 MEDIUM· v3 4.7 MEDIUM· v2 drivers/net/wireless/marvell/libertas/if_sdio.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. |
4Canonical LinuxOpensuse+1 more4Enterprise Linux LeapLinux Kernel+1 moreJun 17, 2026 Sep 11, 2019 N/A· v4 4.1 MEDIUM· v3 4.7 MEDIUM· v2 drivers/net/fjes/fjes_main.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. |
drivers/gpu/drm/radeon/radeon_display.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. NOTE: A third-party software maintainer states that the work queu...Show more |
3Canonical LinuxRedhat3Enterprise Linux Linux KernelUbuntu LinuxJun 17, 2026 Sep 11, 2019 N/A· v4 4.1 MEDIUM· v3 4.7 MEDIUM· v2 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. NOTE: The security community disputes this issues as not being...Show more |
res_pjsip_t38 in Sangoma Asterisk 15.x before 15.7.4 and 16.x before 16.5.1 allows an attacker to trigger a crash by sending a declined stream in a response to a T.38 re-invite initiated by Asterisk. The crash occurs bec...Show more |
MyHTML through 4.0.5 has a NULL pointer dereference in myhtml_tree_node_remove in tree.c. |
Onigmo through 6.2.0 has a NULL pointer dereference in onig_error_code_to_str because of fetch_token in regparse.c. |
2Canonical Symonics2Libmysofa Ubuntu LinuxJun 17, 2026 Sep 8, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Symonics libmysofa 0.7 has a NULL pointer dereference in getHrtf in hrtf/reader.c. |
An issue was discovered in the Linux kernel through 5.2.13. nbd_genl_status in drivers/block/nbd.c does not check the nla_nest_start_noflag return value. |
An issue was discovered in the Linux kernel before 5.0.11. fm10k_init_module in drivers/net/ethernet/intel/fm10k/fm10k_main.c has a NULL pointer dereference because there is no -ENOMEM upon an alloc_workqueue failure. |
An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a cd data structure if alloc_disk fails in drivers/block/paride/pf.c. |
An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a pf data structure if alloc_disk fails in drivers/block/paride/pf.c. |
Xpdf 2.00 allows a SIGSEGV in XRef::constructXRef in XRef.cc. NOTE: 2.00 is a version from November 2002. |
2Debian Videolan2Debian Linux Vlc Media PlayerJun 17, 2026 Aug 29, 2019 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 In VideoLAN VLC media player 3.0.7.1, there is a NULL pointer dereference at the function SeekPercent of demux/asf/asf.c that will lead to a denial of service attack. |
An issue was discovered in Binaryen 1.38.32. Two visitors in ir/ExpressionManipulator.cpp can lead to a NULL pointer dereference in wasm::LocalSet::finalize in wasm/wasm.cpp. A crafted input can cause segmentation faults...Show more |
1Libmirage Project 1Libmirage Jun 17, 2026 Aug 29, 2019 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 libMirage 3.2.2 in CDemu has a NULL pointer dereference in the NRG parser in parser.c. |
1Cisco 2Integrated Management Controller Supervisor Unified Computing SystemJun 17, 2026 Aug 21, 2019 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to cause the web server process to crash, causing a denial of service (DoS) condition on a...Show more |
An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop-usb.c driver. |
3Canonical LinuxNetapp7Active Iq Unified Manager Data Availability ServicesH410c Firmware+4 moreJun 17, 2026 Aug 19, 2019 N/A· v4 4.6 MEDIUM· v3 4.9 MEDIUM· v2 An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/driver.c driver. |
3Linux NetappOpensuse7Active Iq Unified Manager Data Availability ServicesH410c Firmware+4 moreJun 17, 2026 Aug 19, 2019 N/A· v4 4.6 MEDIUM· v3 4.9 MEDIUM· v2 An issue was discovered in the Linux kernel before 5.2.8. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/helper.c (motu_microbookii) driver. |