← Back
CWE-476

5,862 CVEs • Abstraction: Base • Likelihood of Exploit: Medium

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

JSON object

Loading...

CVEs (5,862)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Fedoraproject
Qemu
2Fedora
Qemu
Jun 17, 2026
Jun 2, 2021
N/A· v4
6.0 MEDIUM· v3
2.1 LOW· v2
A NULL pointer dereference flaw was found in the megasas-gen2 SCSI host bus adapter emulation of QEMU in versions before and including 6.0. This issue occurs in the megasas_command_cancelled() callback function while dro...Show more
A NULL pointer dereference flaw was found in the megasas-gen2 SCSI host bus adapter emulation of QEMU in versions before and including 6.0. This issue occurs in the megasas_command_cancelled() callback function while dropping a SCSI request. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.Show less
3Fedoraproject
Nitro Enclaves ProjectRedhat
3Enterprise Linux
FedoraNitro Enclaves
Jun 17, 2026
Jun 1, 2021
N/A· v4
6.7 MEDIUM· v3
7.2 HIGH· v2
A flaw null pointer dereference in the Nitro Enclaves kernel driver was found in the way that Enclaves VMs forces closures on the enclave file descriptor. A local user of a host machine could use this flaw to crash the s...Show more
A flaw null pointer dereference in the Nitro Enclaves kernel driver was found in the way that Enclaves VMs forces closures on the enclave file descriptor. A local user of a host machine could use this flaw to crash the system or escalate their privileges on the system.Show less
1Gnu
1Gama
Jun 17, 2026
May 28, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A NULL-pointer deference issue was discovered in GNU_gama::set() in ellipsoid.h in Gama 2.04 which can lead to a denial of service (DOS) via segment faults caused by crafted inputs.
1Redhat
1389 Directory Server
Jun 17, 2026
May 28, 2021
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
When using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash.
2Debian
Qemu
2Debian Linux
Qemu
Jun 17, 2026
May 28, 2021
N/A· v4
4.4 MEDIUM· v3
2.1 LOW· v2
A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0. This issue occurs while handling the 'Information Transfer' command. This flaw allows a privileg...Show more
A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0. This issue occurs while handling the 'Information Transfer' command. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.Show less
3Debian
FedoraprojectQemu
3Debian Linux
FedoraQemu
Jun 17, 2026
May 28, 2021
N/A· v4
6.0 MEDIUM· v3
2.1 LOW· v2
A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions before 6.0.0. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service....Show more
A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions before 6.0.0. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.Show less
3Fedoraproject
RedhatUpx
3Enterprise Linux
FedoraUpx
Jun 17, 2026
May 27, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Null pointer dereference was found in upx PackLinuxElf::canUnpack() in p_lx_elf.cpp,in version UPX 4.0.0. That allow attackers to execute arbitrary code and cause a denial of service via a crafted file.
2Debian
Qemu
2Debian Linux
Qemu
Jun 17, 2026
May 26, 2021
N/A· v4
6.5 MEDIUM· v3
2.1 LOW· v2
A NULL pointer dereference flaw was found in the floppy disk emulator of QEMU. This issue occurs while processing read/write ioport commands if the selected floppy drive is not initialized with a block device. This flaw...Show more
A NULL pointer dereference flaw was found in the floppy disk emulator of QEMU. This issue occurs while processing read/write ioport commands if the selected floppy drive is not initialized with a block device. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.Show less
2Debian
Ffmpeg
2Debian Linux
Ffmpeg
Jun 17, 2026
May 25, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
FFmpeg 4.2 is affected by null pointer dereference passed as argument to libavformat/aviobuf.c, which could cause a Denial of Service.
1Zephyrproject
1Zephyr
Jun 17, 2026
May 25, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Type Confusion in 802154 ACK Frames Handling. Zephyr versions >= v2.4.0 contain NULL Pointer Dereference (CWE-476). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-27r3-rxc...Show more
Type Confusion in 802154 ACK Frames Handling. Zephyr versions >= v2.4.0 contain NULL Pointer Dereference (CWE-476). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-27r3-rxch-2hm7Show less
1Zephyrproject
1Zephyr
Jun 17, 2026
May 25, 2021
N/A· v4
5.7 MEDIUM· v3
3.3 LOW· v2
Incorrect Error Handling in Bluetooth HCI core. Zephyr versions >= v1.14.2, >= v2.2.0 contain NULL Pointer Dereference (CWE-476). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories...Show more
Incorrect Error Handling in Bluetooth HCI core. Zephyr versions >= v1.14.2, >= v2.2.0 contain NULL Pointer Dereference (CWE-476). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-gc66-xfrc-24qrShow less
1Envoyproxy
1Envoy
Jun 17, 2026
May 20, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable NULL pointer dereference and crash in TLS when an unknown TLS alert code is received.
2Fedoraproject
Slapi Nis Project
2Fedora
Slapi Nis
Jun 17, 2026
May 20, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker to crash the 389-ds-base directory server. The highest thre...Show more
A flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker to crash the 389-ds-base directory server. The highest threat from this vulnerability is to system availability.Show less
1Mikrotik
1Routeros
Jun 17, 2026
May 19, 2021
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/dot1x process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).
1Mikrotik
1Routeros
Jun 17, 2026
May 18, 2021
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/sniffer process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).
1Gnu
1Libredwg
Jul 9, 2026
May 17, 2021
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A null pointer deference issue exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2337.
1Gnu
1Libredwg
Jul 9, 2026
May 17, 2021
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A null pointer deference issue exists in GNU LibreDWG 0.10 via get_bmp ../../programs/dwgbmp.c:164.
1Gnu
1Libredwg
Jul 9, 2026
May 17, 2021
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A null pointer dereference issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:29. which causes a denial of service (application crash).
1Gnu
1Libredwg
Jul 9, 2026
May 17, 2021
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A null pointer deference issue exists in GNU LibreDWG 0.10.2641 via output_TEXT ../../programs/dwg2SVG.c:114, which causes a denial of service (application crash).
6Debian
FedoraprojectNetapp+3 more
19Active Iq Unified Manager
Clustered Data OntapClustered Data Ontap Antivirus Connector+16 more
Oct 14, 2026
May 14, 2021
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and...Show more
A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest threat from this vulnerability is to system availability.Show less