CWE-476 · NULL Pointer Dereference (page 14)
Page 14 of 56 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-52984 | Medium | 5.9 | 2025-07-11 | A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, netw… |
CVE-2025-6395 | Medium | 6.5 | 2025-07-10 | A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite(). |
CVE-2025-38337 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() Since handle->h_t… |
CVE-2025-38328 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: jffs2: check jffs2_prealloc_raw_node_refs() result in few other places Fuzzing hit anothe… |
CVE-2025-38319 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table Th… |
CVE-2025-38316 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: avoid NULL pointer dereference in mt7996_set_monitor() The function m… |
CVE-2025-38308 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix possible null-ptr-deref when initing hw Search result of avs_dai_fi… |
CVE-2025-38307 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Verify content returned by parse_int_array() The first element of the r… |
CVE-2025-38304 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix NULL pointer deference on eir_get_service_data The len parameter is consid… |
CVE-2025-38301 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: nvmem: zynqmp_nvmem: unbreak driver after cleanup Commit 29be47fcd6a0 ("nvmem: zynqmp_nvm… |
CVE-2025-38299 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8195: Set ETDM1/2 IN/OUT to COMP_DUMMY() ETDM2_IN_BE and ETDM1_OUT_BE a… |
CVE-2025-38294 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix NULL access in assign channel context handler Currently, when ath12k_ma… |
CVE-2025-38284 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: configure manual DAC mode via PCI config API only To support 36-bit DMA… |
CVE-2025-38281 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Add NULL check in mt7996_thermal_init devm_kasprintf() can return a N… |
CVE-2025-38275 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug The qmp_usb_iomap() helper function curren… |
CVE-2025-38274 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt() fpga_mgr_test_img_… |
CVE-2025-38271 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: net: prevent a NULL deref in rtnl_create_link() At the time rtnl_create_link() is running… |
CVE-2025-38269 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: btrfs: exit after state insertion failure at btrfs_convert_extent_bit() If insert_state()… |
CVE-2025-38266 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: eint: Fix invalid pointer dereference for v1 platforms Commit 3ef9f710… |
CVE-2025-38265 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: serial: jsm: fix NPE during jsm_uart_port_init No device was set which caused serial_base… |
CVE-2025-38263 | Medium | 5.5 | 2025-07-09 | In the Linux kernel, the following vulnerability has been resolved: bcache: fix NULL pointer in cache_set_flush() 1. LINE#1794 - LINE#1887 is some codes abou… |
CVE-2025-38262 | High | 7.8 | 2025-07-09 | In the Linux kernel, the following vulnerability has been resolved: tty: serial: uartlite: register uart driver in init When two instances of uart devices ar… |
CVE-2025-38260 | Medium | 5.5 | 2025-07-09 | In the Linux kernel, the following vulnerability has been resolved: btrfs: handle csum tree error with rescue=ibadroots correctly [BUG] There is syzbot based… |
CVE-2025-38255 | Medium | 5.5 | 2025-07-09 | In the Linux kernel, the following vulnerability has been resolved: lib/group_cpus: fix NULL pointer dereference from group_cpus_evenly() While testing null_… |
CVE-2025-38251 | Medium | 5.5 | 2025-07-09 | In the Linux kernel, the following vulnerability has been resolved: atm: clip: prevent NULL deref in clip_push() Blamed commit missed that vcc_destroy_socket… |
CVE-2025-38243 | Medium | 5.5 | 2025-07-09 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid inode pointer dereferences during log replay In a few places where we… |
CVE-2025-7209 | Low | 3.3 | 2025-07-09 | A vulnerability has been found in 9fans plan9port up to 9da5b44 and classified as problematic. Affected by this vulnerability is the function value_decode in t… |
CVE-2025-47119 | Medium | 5.5 | 2025-07-08 | Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service… |
CVE-2025-49524 | Medium | 5.5 | 2025-07-08 | Illustrator versions 28.7.6, 29.5.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An a… |
CVE-2025-43583 | Medium | 5.5 | 2025-07-08 | Substance3D - Viewer versions 0.22 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An at… |
CVE-2025-49694 | High | 7.8 | 2025-07-08 | Null pointer dereference in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |
CVE-2025-49686 | High | 7.8 | 2025-07-08 | Null pointer dereference in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
CVE-2025-49678 | High | 7.0 | 2025-07-08 | Null pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2025-47109 | Medium | 5.5 | 2025-07-08 | After Effects versions 25.2, 24.6.6 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An a… |
CVE-2025-21433 | Medium | 6.2 | 2025-07-08 | Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus. |
CVE-2024-25177 | High | 7.5 | 2025-07-07 | LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL metatable, which leads to Denial of Service (DoS). |
CVE-2025-53184 | Medium | 6.5 | 2025-07-07 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-53183 | Medium | 6.5 | 2025-07-07 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-53182 | Medium | 6.5 | 2025-07-07 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-53181 | Medium | 6.5 | 2025-07-07 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-53180 | Medium | 6.5 | 2025-07-07 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-53179 | Medium | 6.5 | 2025-07-07 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-53170 | Medium | 4.0 | 2025-07-07 | Null pointer dereference vulnerability in the application exit cause module Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-53603 | High | 7.5 | 2025-07-05 | In Alinto SOPE SOGo 2.0.2 through 5.12.2, sope-core/NGExtensions/NGHashMap.m allows a NULL pointer dereference and SOGo crash via a request in which a paramete… |
CVE-2025-38231 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: nfsd: Initialize ssc before laundromat_work to prevent NULL dereference In nfs4_state_sta… |
CVE-2025-38220 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: ext4: only dirty folios when data journaling regular files fstest generic/388 occasionall… |
CVE-2025-38215 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var If fb… |
CVE-2025-38214 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var If fb_add_videomod… |
CVE-2025-38210 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: configfs-tsm-report: Fix NULL dereference of tsm_ops Unlike sysfs, the lifetime of config… |
CVE-2025-38208 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: smb: client: add NULL check in automount_fullpath page is checked for null in __build_pat… |
CVE-2025-38203 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: jfs: Fix null-ptr-deref in jfs_ioc_trim [ Syzkaller Report ] Oops: general protection fa… |
CVE-2025-38197 | High | 7.3 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell_rbu: Fix list usage Pass the correct list head to list_for_each_entry*… |
CVE-2025-38192 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: net: clear the dst when changing skb protocol A not-so-careful NAT46 BPF program can cras… |
CVE-2025-38191 | High | 7.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in destroy_previous_session If client set ->PreviousS… |
CVE-2025-38189 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Avoid NULL pointer dereference in `v3d_job_update_stats()` The following kernel… |
CVE-2025-38184 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer The reproduction ste… |
CVE-2025-38181 | High | 7.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). syzkaller reported a null-ptr… |
CVE-2025-38171 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: power: supply: max77705: Fix workqueue error handling in probe The create_singlethread_wo… |
CVE-2025-38167 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: handle hdr_first_de() return value The hdr_first_de() function returns a pointe… |
CVE-2025-38163 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on sbi->total_valid_block_count syzbot reported a f2fs bug a… |
CVE-2025-38160 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() devm_kasprintf() returns NULL… |
CVE-2025-38156 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix null-ptr-deref in mt7996_mmio_wed_init() devm_ioremap() returns N… |
CVE-2025-38155 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init() devm_ioremap() returns N… |
CVE-2025-38149 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net: phy: clear phydev->devlink when the link is deleted There is a potential crash issue… |
CVE-2025-38147 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: calipso: Don't call calipso functions for AF_INET sk. syzkaller reported a null-ptr-deref… |
CVE-2025-38145 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop() devm_kasprintf() returns NULL wh… |
CVE-2025-38144 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: watchdog: lenovo_se30_wdt: Fix possible devm_ioremap() NULL pointer dereference in lenovo_… |
CVE-2025-38143 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: backlight: pm8941: Add NULL check in wled_configure() devm_kasprintf() returns NULL when… |
CVE-2025-38142 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (asus-ec-sensors) check sensor index in read_string() Prevent a potential invalid… |
CVE-2025-38138 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: Add NULL check in udma_probe() devm_kasprintf() returns NULL when memory a… |
CVE-2025-38135 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: serial: Fix potential null-ptr-deref in mlb_usio_probe() devm_ioremap() can return NULL o… |
CVE-2025-38134 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: usb: acpi: Prevent null pointer dereference in usb_acpi_add_usb4_devlink() As demonstrate… |
CVE-2025-38130 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: drm/connector: only call HDMI audio helper plugged cb if non-null On driver remove, sound… |
CVE-2025-38123 | Critical | 9.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: Fix napi rx poll issue When driver handles the napi rx polling requests… |
CVE-2025-38122 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO gve_alloc_pending_pa… |
CVE-2025-38121 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: avoid panic on init failure In case of an error during init, in_hw_re… |
CVE-2025-38113 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Fix NULL pointer dereference when nosmp is used With nosmp in cmdline, other… |
CVE-2025-38100 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: x86/iopl: Cure TIF_IO_BITMAP inconsistencies io_bitmap_exit() is invoked from exit_thread… |
CVE-2025-38095 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: dma-buf: insert memory barrier before updating num_fences smp_store_mb() inserts memory b… |
CVE-2025-38092 | High | 8.8 | 2025-07-02 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: use list_first_entry_or_null for opinfo_get_list() The list_first_entry() macro ne… |
CVE-2025-38089 | Critical | 9.8 | 2025-06-30 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error tianshuo han reported… |
CVE-2025-6858 | Low | 3.3 | 2025-06-29 | A vulnerability was found in HDF5 1.14.6 and classified as problematic. Affected by this issue is the function H5C__flush_single_entry of the file src/H5Centry… |
CVE-2025-45333 | High | 7.5 | 2025-06-25 | berkeley-abc abc 1.1 contains a Null Pointer Dereference (NPD) vulnerability in the Abc_NtkCecFraigPart function of its data processing module, leading to unpr… |
CVE-2025-45332 | High | 7.5 | 2025-06-25 | vkoskiv c-ray 1.1 contains a Null Pointer Dereference (NPD) vulnerability in the parse_mtllib function of its data processing module, leading to unpredictable… |
CVE-2025-6496 | Low | 3.3 | 2025-06-23 | A vulnerability was found in HTACG tidy-html5 5.8.0. It has been declared as problematic. This vulnerability affects the function InsertNodeAsParent of the fil… |
CVE-2025-6375 | Low | 3.3 | 2025-06-21 | A vulnerability was found in poco up to 1.14.1. It has been rated as problematic. Affected by this issue is the function MultipartInputStream of the file Net/s… |
CVE-2025-45331 | High | 7.5 | 2025-06-20 | brplot v420.69.1 contains a Null Pointer Dereference (NPD) vulnerability in the br_dagens_handle_once function of its data processing module, leading to unpred… |
CVE-2025-48705 | High | 7.5 | 2025-06-20 | An issue was discovered in COROS PACE 3 through 3.0808.0. Due to a NULL pointer dereference vulnerability, sending a crafted BLE message forces the device to r… |
CVE-2022-50218 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: iio: light: isl29028: Fix the warning in isl29028_remove() The driver use the non-managed… |
CVE-2022-50206 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: arm64: fix oops in concurrently setting insn_emulation sysctls emulation_proc_handler() c… |
CVE-2022-50181 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: virtio-gpu: fix a missing check to avoid NULL dereference 'cache_ent' could be set NULL i… |
CVE-2022-50148 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: kernfs: fix potential NULL dereference in __kernfs_remove When lockdep is enabled, lockde… |
CVE-2022-50145 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: sf-pdma: Add multithread support for a DMA channel When we get a DMA channel a… |
CVE-2022-50144 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: soundwire: revisit driver bind/unbind and callbacks In the SoundWire probe, we store a po… |
CVE-2022-50135 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix BUG: KASAN: null-ptr-deref in rxe_qp_do_cleanup The function rxe_create_qp… |
CVE-2022-50133 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: usb: xhci_plat_remove: avoid NULL dereference Since commit 4736ebd7fcaff1eb8481c140ba4949… |
CVE-2022-50132 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadge… |
CVE-2022-50091 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: locking/csd_lock: Change csdlock_debug from early_param to __setup The csdlock_debug kern… |
CVE-2022-50080 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: tee: add overflow check in register_shm_helper() With special lengths supplied by user sp… |
CVE-2022-50078 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: tracing/eprobes: Do not allow eprobes to use $stack, or % for regs While playing with eve… |