CWE-476 · NULL Pointer Dereference (page 12)
Page 12 of 57 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-53534 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc As the devm_kcalloc may return NU… |
CVE-2022-50506 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: drbd: only clone bio if we have a backing device Commit c347a787e34cb (drbd: set ->bi_bde… |
CVE-2022-50503 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: mtd: lpddr2_nvm: Fix possible null-ptr-deref It will cause null-ptr-deref when resource_s… |
CVE-2022-50501 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: media: coda: Add check for dcoda_iram_alloc As the coda_iram_alloc may return NULL pointe… |
CVE-2022-50481 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() If device_register() fai… |
CVE-2022-50475 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Make sure "ib_port" is valid when access sysfs node The "ib_port" structure mu… |
CVE-2025-39950 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR A NULL pointer… |
CVE-2025-39947 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Harden uplink netdev access against device unbind The function mlx5_uplink_net… |
CVE-2025-39938 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed If earl… |
CVE-2025-39937 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer Since commit 7d… |
CVE-2025-39936 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() When … |
CVE-2025-39934 | Medium | 5.5 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ If the interrupt occurs… |
CVE-2025-52866 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-52862 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-52860 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-52859 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-52858 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-52857 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-52855 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-52854 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-52853 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-52433 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-52432 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-52428 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-52427 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-52424 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-48729 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-48728 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-48727 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-48726 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-47214 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-47213 | Medium | 4.9 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator accoun… |
CVE-2025-47210 | Medium | 6.5 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulner… |
CVE-2025-44011 | Medium | 6.5 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulner… |
CVE-2025-44010 | Medium | 6.5 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulner… |
CVE-2025-44009 | Medium | 6.5 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulner… |
CVE-2025-44008 | Medium | 6.5 | 2025-10-03 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulner… |
CVE-2025-61668 | | 2025-10-02 | Volto is a ReactJS-based frontend for the Plone Content Management System. Versions 16.34.0 and below, 17.0.0 through 17.22.1, 18.0.0 through 18.27.1, and 19.0… | |
CVE-2025-59537 | High | 7.5 | 2025-10-01 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions 1.2.0 through 1.8.7, 2.0.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1… |
CVE-2025-59150 | High | 7.5 | 2025-10-01 | Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Version 8.0.0's usage of… |
CVE-2025-59148 | High | 7.5 | 2025-10-01 | Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Versions 8.0.0 and below… |
CVE-2023-53531 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: null_blk: fix poll request timeout handling When doing io_uring benchmark on /dev/nullb0… |
CVE-2023-53523 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: fix time stamp counter initialization If the gs_usb device driver is unloade… |
CVE-2023-53503 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: ext4: allow ext4_get_group_info() to fail Previously, ext4_get_group_info() would treat a… |
CVE-2023-53498 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential null dereference The adev->dm.dc pointer can be NULL and d… |
CVE-2023-53497 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: media: vsp1: Replace vb2_is_streaming() with vb2_start_streaming_called() The vsp1 driver… |
CVE-2023-53483 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: Check for null return of devm_kzalloc() in fch_misc_setup() devm_kzalloc… |
CVE-2023-53480 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: kobject: Add sanity check for kset->kobj.ktype in kset_register() When I register a kset… |
CVE-2023-53476 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry() This condition ne… |
CVE-2023-53472 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: pwm: lpc32xx: Remove handling of PWM channels Because LPC32xx PWM controllers have only a… |
CVE-2023-53470 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: ionic: catch failure from devlink_alloc Add a check for NULL on the alloc return. If dev… |
CVE-2023-53464 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() The validity of sock s… |
CVE-2023-53458 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and buffer_finish() When the… |
CVE-2023-53457 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: FS: JFS: Fix null-ptr-deref Read in txBegin Syzkaller reported an issue where txBegin ma… |
CVE-2023-53451 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix potential NULL pointer dereference Klocwork tool reported 'cur_dsd' ma… |
CVE-2022-50467 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix null ndlp ptr dereference in abnormal exit path for GFT_ID An error case… |
CVE-2022-50459 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() Fix a NULL pointer… |
CVE-2022-50453 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: fix NULL-pointer dereferences There are several places where we can crash… |
CVE-2022-50452 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: net: sched: cake: fix null pointer access issue when cake_init() fails When the default q… |
CVE-2022-50447 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Fix crash on hci_create_cis_sync When attempting to connect multiple… |
CVE-2022-50441 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Lag, fix failure to cancel delayed bond work Commit 0d4e8ed139d8 ("net/mlx5: La… |
CVE-2022-50440 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate the box size for the snooped cursor Invalid userspace dma surface co… |
CVE-2022-50425 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly When an extended state c… |
CVE-2025-39920 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: pcmcia: Add error handling for add_interval() in do_validate_mem() In the do_validate_mem… |
CVE-2025-39906 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: remove oem i2c adapter on finish Fixes a bug where unbinding of the GPU… |
CVE-2025-39903 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: of_numa: fix uninitialized memory nodes causing kernel panic When there are memory-only n… |
CVE-2025-39902 | High | 7.1 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: mm/slub: avoid accessing metadata when pointer is invalid in object_err() object_err() re… |
CVE-2025-39897 | High | 7.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Add error handling for RX metadata pointer retrieval Add proper err… |
CVE-2025-39895 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: sched: Fix sched_numa_find_nth_cpu() if mask offline sched_numa_find_nth_cpu() uses a bse… |
CVE-2025-39892 | Medium | 5.5 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-core: care NULL dirver name on snd_soc_lookup_component_nolocked() soc-generic-… |
CVE-2025-59668 | High | 7.5 | 2025-09-30 | Multiple versions of Central Monitor CNS-6201 contain a NULL pointer dereference vulnerability. When processing a crafted certain UDP packet, the affected devi… |
CVE-2025-11017 | Low | 3.3 | 2025-09-26 | A vulnerability was detected in OGRECave Ogre up to 14.4.1. The impacted element is the function Ogre::LogManager::stream of the file /ogre/OgreMain/src/OgreLo… |
CVE-2025-11013 | Low | 3.3 | 2025-09-26 | A vulnerability was identified in BehaviorTree up to 4.7.0. This vulnerability affects the function XMLParser::PImpl::loadDocImpl of the file /src/xml_parsing… |
CVE-2025-11011 | Low | 3.3 | 2025-09-26 | A vulnerability was found in BehaviorTree up to 4.7.0. Affected by this issue is the function JsonExporter::fromJson of the file /src/json_export.cpp. Performi… |
CVE-2025-11000 | Low | 3.3 | 2025-09-26 | A vulnerability was determined in Open Babel up to 3.1.1. This affects the function PQSFormat::ReadMolecule of the file /src/formats/PQSformat.cpp. This manipu… |
CVE-2025-10999 | Low | 3.3 | 2025-09-26 | A vulnerability was found in Open Babel up to 3.1.1. The impacted element is the function CacaoFormat::SetHilderbrandt of the file /src/formats/cacaoformat.cpp… |
CVE-2025-10998 | Low | 3.3 | 2025-09-26 | A vulnerability has been found in Open Babel up to 3.1.1. The affected element is the function ChemKinFormat::ReadReactionQualifierLines of the file /src/forma… |
CVE-2025-57623 | Medium | 5.3 | 2025-09-25 | A NULL pointer dereference in TOTOLINK N600R firmware v4.3.0cu.7866_B2022506 allows attackers to cause a Denial of Service. |
CVE-2025-60019 | Low | 3.7 | 2025-09-25 | glib-networking's OpenSSL backend fails to properly check the return value of memory allocation routines. An out of memory condition could potentially result i… |
CVE-2025-23346 | Low | 3.3 | 2025-09-24 | NVIDIA CUDA Toolkit contains a vulnerability in cuobjdump, where an unprivileged user can cause a NULL pointer dereference. A successful exploit of this vulne… |
CVE-2025-55780 | High | 7.5 | 2025-09-23 | A null pointer dereference occurs in the function break_word_for_overflow_wrap() in MuPDF 1.26.4 when rendering a malformed EPUB document. Specifically, the fu… |
CVE-2025-39887 | Medium | 5.5 | 2025-09-23 | In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Fix null-ptr-deref in bitmap_parselist() A crash was observed with the f… |
CVE-2025-39879 | Medium | 5.5 | 2025-09-23 | In the Linux kernel, the following vulnerability has been resolved: ceph: always call ceph_shift_unused_folios_left() The function ceph_process_folio_batch()… |
CVE-2025-39878 | Medium | 5.5 | 2025-09-23 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix crash after fscrypt_encrypt_pagecache_blocks() error The function move_dirty_fo… |
CVE-2025-39876 | Medium | 5.5 | 2025-09-23 | In the Linux kernel, the following vulnerability has been resolved: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() The function of_phy_f… |
CVE-2025-39875 | Medium | 5.5 | 2025-09-23 | In the Linux kernel, the following vulnerability has been resolved: igb: Fix NULL pointer dereference in ethtool loopback test The igb driver currently cause… |
CVE-2025-10823 | Low | 3.3 | 2025-09-23 | A vulnerability was found in axboe fio up to 3.41. This affects the function str_buffer_pattern_cb of the file options.c. Performing manipulation results in nu… |
CVE-2025-46711 | Medium | 5.5 | 2025-09-22 | Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger NULL pointer dereference kernel exceptions. |
CVE-2025-39865 | Medium | 5.5 | 2025-09-19 | In the Linux kernel, the following vulnerability has been resolved: tee: fix NULL pointer dereference in tee_shm_put tee_shm_put have NULL pointer dereferenc… |
CVE-2025-39858 | Medium | 5.5 | 2025-09-19 | In the Linux kernel, the following vulnerability has been resolved: eth: mlx4: Fix IS_ERR() vs NULL check bug in mlx4_en_create_rx_ring Replace NULL check wi… |
CVE-2025-39857 | High | 7.5 | 2025-09-19 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync() BUG: kernel NULL po… |
CVE-2025-39856 | Medium | 5.5 | 2025-09-19 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw-nuss: Fix null pointer dereference for ndev In the TX comple… |
CVE-2025-39851 | High | 7.5 | 2025-09-19 | In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object VXLAN FDB entries can p… |
CVE-2025-39850 | Medium | 5.5 | 2025-09-19 | In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects When the "proxy" option… |
CVE-2025-39846 | Medium | 5.5 | 2025-09-19 | In the Linux kernel, the following vulnerability has been resolved: pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region() In __iodyn_find_io_reg… |
CVE-2025-39838 | Medium | 5.5 | 2025-09-19 | In the Linux kernel, the following vulnerability has been resolved: cifs: prevent NULL pointer dereference in UTF16 conversion There can be a NULL pointer de… |
CVE-2023-53444 | Medium | 5.5 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: drm/ttm: fix bulk_move corruption when adding a entry When the resource is the first in t… |
CVE-2023-53442 | Medium | 5.5 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: ice: Block switchdev mode when ADQ is active and vice versa ADQ and switchdev are not sup… |
CVE-2023-53440 | High | 7.8 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix sysfs interface lifetime The current nilfs2 sysfs support has issues with the… |
CVE-2023-53425 | Medium | 5.5 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: media: platform: mediatek: vpu: fix NULL ptr dereference If pdev is NULL, then it is stil… |