← Back
CWE-476

5,435 CVEs • Abstraction: Base • Likelihood of Exploit: Medium

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

JSON object

Loading...

CVEs (5,435)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Libming
1Ming
Jun 17, 2026
Feb 25, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Ming (aka libming) 0.4.8 has a NULL pointer dereference in the function getString() in the decompile.c file in libutil.a.
1Leonerd
1Libvterm
Nov 21, 2024
Feb 24, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (application crash), related to screen.c, state.c, and vterm.c.
1Matio Project
1Matio
Jun 17, 2026
Feb 23, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a NULL pointer dereference in the function Mat_VarFree() in mat.c.
1Mi
1Mi Mix 2 Firmware
Jun 17, 2026
Feb 17, 2019
N/A· v4
5.5 MEDIUM· v3
4.9 MEDIUM· v2
On Xiaomi MIX 2 devices with the 4.4.78 kernel, a NULL pointer dereference in the ioctl interface of the device file /dev/elliptic1 or /dev/elliptic0 causes a system crash via IOCTL 0x4008c575 (aka decimal 1074316661).
1Axiosys
1Bento4
Jun 17, 2026
Feb 17, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in Bento4 1.5.1-628. A NULL pointer dereference occurs in the function AP4_List:Find located in Core/Ap4List.h when called from Core/Ap4Movie.cpp. It can be triggered by sending a crafted file to...Show more
An issue was discovered in Bento4 1.5.1-628. A NULL pointer dereference occurs in the function AP4_List:Find located in Core/Ap4List.h when called from Core/Ap4Movie.cpp. It can be triggered by sending a crafted file to the mp4dump binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.Show less
1Axiosys
1Bento4
Jun 17, 2026
Feb 17, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in Bento4 1.5.1-628. A NULL pointer dereference occurs in AP4_Track::GetSampleIndexForTimeStampMs() located in Core/Ap4Track.cpp. It can triggered by sending a crafted file to the mp4audioclip bin...Show more
An issue was discovered in Bento4 1.5.1-628. A NULL pointer dereference occurs in AP4_Track::GetSampleIndexForTimeStampMs() located in Core/Ap4Track.cpp. It can triggered by sending a crafted file to the mp4audioclip binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.Show less
4Advancemame
DebianFedoraproject+1 more
6Advancecomp
Debian LinuxEnterprise Linux For Power Little Endian+3 more
Jun 17, 2026
Feb 17, 2019
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in AdvanceCOMP through 2.1. A NULL pointer dereference exists in the function be_uint32_read() located in endianrw.h. It can be triggered by sending a crafted file to a binary. It allows an attack...Show more
An issue was discovered in AdvanceCOMP through 2.1. A NULL pointer dereference exists in the function be_uint32_read() located in endianrw.h. It can be triggered by sending a crafted file to a binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact when a victim opens a specially crafted file.Show less
2Broadcom
Fedoraproject
2Fedora
Tcpreplay
Jun 17, 2026
Feb 17, 2019
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_ipv6_l4proto() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It a...Show more
An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_ipv6_l4proto() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.Show less
2Broadcom
Fedoraproject
2Fedora
Tcpreplay
Jun 17, 2026
Feb 17, 2019
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_layer4_v6() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allo...Show more
An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_layer4_v6() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.Show less
1Sound Exchange Project
1Sound Exchange
Jun 17, 2026
Feb 15, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in SoX 14.4.2. lsx_make_lpf in effect_i_dsp.c allows a NULL pointer dereference.
1Nttdocomo
1V20 Pro L 01j Firmware
Jun 17, 2026
Feb 13, 2019
N/A· v4
5.3 MEDIUM· v3
5.7 MEDIUM· v2
V20 PRO L-01J software version L01J20c and L01J20d has a NULL pointer exception flaw that can be used by an attacker to cause the device to crash on the same network range via a specially crafted access point.
1Google
1Android
Nov 21, 2024
Feb 11, 2019
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Null pointer dereference vulnerability may occur due to missing NULL assignment in NAT module of freed pointer.
1Webassembly
1Binaryen
Jun 17, 2026
Feb 10, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A NULL pointer dereference was discovered in wasm::SExpressionWasmBuilder::parseExpression in wasm-s-parser.cpp in Binaryen 1.38.22. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as d...Show more
A NULL pointer dereference was discovered in wasm::SExpressionWasmBuilder::parseExpression in wasm-s-parser.cpp in Binaryen 1.38.22. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-as.Show less
1Fortinet
1Forticlient
Jun 17, 2026
Feb 8, 2019
N/A· v4
5.5 MEDIUM· v3
4.9 MEDIUM· v2
A null pointer dereference vulnerability in Fortinet FortiClientWindows 6.0.2 and earlier allows attacker to cause a denial of service via the NDIS miniport driver.
1Lcds
1Laquis Scada
Nov 21, 2024
Feb 5, 2019
N/A· v4
7.8 HIGH· v3
8.3 HIGH· v2
LCDS Laquis SCADA prior to version 4.1.0.4150 allows an attacker using a specially crafted project file to supply a pointer for a controlled memory address, which may allow remote code execution, data exfiltration, or ca...Show more
LCDS Laquis SCADA prior to version 4.1.0.4150 allows an attacker using a specially crafted project file to supply a pointer for a controlled memory address, which may allow remote code execution, data exfiltration, or cause a system crash.Show less
1Podofo Project
1Podofo
Nov 21, 2024
Feb 4, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in crop_page in PoDoFo 0.9.6. For a crafted PDF document, pPage->GetObject()->GetDictionary().AddKey(PdfName("MediaBox"),var) can be problematic due to the function GetObject() being called for th...Show more
An issue was discovered in crop_page in PoDoFo 0.9.6. For a crafted PDF document, pPage->GetObject()->GetDictionary().AddKey(PdfName("MediaBox"),var) can be problematic due to the function GetObject() being called for the pPage NULL pointer object. The value of pPage at this point is 0x0, which causes a NULL pointer dereference.Show less
1Libdoc Project
1Libdoc
Jun 17, 2026
Jan 30, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In libdoc through 2019-01-28, doc2text in catdoc.c has a NULL pointer dereference.
1Webassembly
1Binaryen
Jun 17, 2026
Jan 29, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A NULL pointer dereference was discovered in wasm::WasmBinaryBuilder::processFunctions() in wasm/wasm-binary.cpp (when calling wasm::WasmBinaryBuilder::getFunctionIndexName) in Binaryen 1.38.22. A crafted input can cause...Show more
A NULL pointer dereference was discovered in wasm::WasmBinaryBuilder::processFunctions() in wasm/wasm-binary.cpp (when calling wasm::WasmBinaryBuilder::getFunctionIndexName) in Binaryen 1.38.22. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by wasm-opt.Show less
1Webassembly
1Binaryen
Jun 17, 2026
Jan 29, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A NULL pointer dereference was discovered in wasm::Module::getFunctionOrNull in wasm/wasm.cpp in Binaryen 1.38.22. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by wasm-opt.
1Adobe
2Acrobat Dc
Acrobat Reader Dc
Nov 21, 2024
Jan 18, 2019
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, an...Show more
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution.Show less