CWE-476 · NULL Pointer Dereference (page 16)
Page 16 of 57 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-49686 | High | 7.8 | 2025-07-08 | Null pointer dereference in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
CVE-2025-49678 | High | 7.0 | 2025-07-08 | Null pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2025-47109 | Medium | 5.5 | 2025-07-08 | After Effects versions 25.2, 24.6.6 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An a… |
CVE-2025-21433 | Medium | 6.2 | 2025-07-08 | Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus. |
CVE-2024-25177 | High | 7.5 | 2025-07-07 | LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL metatable, which leads to Denial of Service (DoS). |
CVE-2025-53184 | Medium | 6.5 | 2025-07-07 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-53183 | Medium | 6.5 | 2025-07-07 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-53182 | Medium | 6.5 | 2025-07-07 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-53181 | Medium | 6.5 | 2025-07-07 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-53180 | Medium | 6.5 | 2025-07-07 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-53179 | Medium | 6.5 | 2025-07-07 | Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-53170 | Medium | 4.0 | 2025-07-07 | Null pointer dereference vulnerability in the application exit cause module Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-53603 | High | 7.5 | 2025-07-05 | In Alinto SOPE SOGo 2.0.2 through 5.12.2, sope-core/NGExtensions/NGHashMap.m allows a NULL pointer dereference and SOGo crash via a request in which a paramete… |
CVE-2025-38231 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: nfsd: Initialize ssc before laundromat_work to prevent NULL dereference In nfs4_state_sta… |
CVE-2025-38220 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: ext4: only dirty folios when data journaling regular files fstest generic/388 occasionall… |
CVE-2025-38215 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var If fb… |
CVE-2025-38214 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var If fb_add_videomod… |
CVE-2025-38210 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: configfs-tsm-report: Fix NULL dereference of tsm_ops Unlike sysfs, the lifetime of config… |
CVE-2025-38208 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: smb: client: add NULL check in automount_fullpath page is checked for null in __build_pat… |
CVE-2025-38203 | Medium | 5.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: jfs: Fix null-ptr-deref in jfs_ioc_trim [ Syzkaller Report ] Oops: general protection fa… |
CVE-2025-38197 | High | 7.3 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell_rbu: Fix list usage Pass the correct list head to list_for_each_entry*… |
CVE-2025-38192 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: net: clear the dst when changing skb protocol A not-so-careful NAT46 BPF program can cras… |
CVE-2025-38191 | High | 7.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in destroy_previous_session If client set ->PreviousS… |
CVE-2025-38189 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Avoid NULL pointer dereference in `v3d_job_update_stats()` The following kernel… |
CVE-2025-38184 | High | 7.8 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer The reproduction ste… |
CVE-2025-38181 | High | 7.5 | 2025-07-04 | In the Linux kernel, the following vulnerability has been resolved: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). syzkaller reported a null-ptr… |
CVE-2025-38171 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: power: supply: max77705: Fix workqueue error handling in probe The create_singlethread_wo… |
CVE-2025-38167 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: handle hdr_first_de() return value The hdr_first_de() function returns a pointe… |
CVE-2025-38163 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on sbi->total_valid_block_count syzbot reported a f2fs bug a… |
CVE-2025-38160 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() devm_kasprintf() returns NULL… |
CVE-2025-38156 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix null-ptr-deref in mt7996_mmio_wed_init() devm_ioremap() returns N… |
CVE-2025-38155 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init() devm_ioremap() returns N… |
CVE-2025-38149 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net: phy: clear phydev->devlink when the link is deleted There is a potential crash issue… |
CVE-2025-38147 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: calipso: Don't call calipso functions for AF_INET sk. syzkaller reported a null-ptr-deref… |
CVE-2025-38145 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop() devm_kasprintf() returns NULL wh… |
CVE-2025-38144 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: watchdog: lenovo_se30_wdt: Fix possible devm_ioremap() NULL pointer dereference in lenovo_… |
CVE-2025-38143 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: backlight: pm8941: Add NULL check in wled_configure() devm_kasprintf() returns NULL when… |
CVE-2025-38142 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (asus-ec-sensors) check sensor index in read_string() Prevent a potential invalid… |
CVE-2025-38138 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: Add NULL check in udma_probe() devm_kasprintf() returns NULL when memory a… |
CVE-2025-38135 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: serial: Fix potential null-ptr-deref in mlb_usio_probe() devm_ioremap() can return NULL o… |
CVE-2025-38134 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: usb: acpi: Prevent null pointer dereference in usb_acpi_add_usb4_devlink() As demonstrate… |
CVE-2025-38130 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: drm/connector: only call HDMI audio helper plugged cb if non-null On driver remove, sound… |
CVE-2025-38123 | Critical | 9.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: Fix napi rx poll issue When driver handles the napi rx polling requests… |
CVE-2025-38122 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO gve_alloc_pending_pa… |
CVE-2025-38121 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: avoid panic on init failure In case of an error during init, in_hw_re… |
CVE-2025-38113 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Fix NULL pointer dereference when nosmp is used With nosmp in cmdline, other… |
CVE-2025-38100 | Medium | 5.5 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: x86/iopl: Cure TIF_IO_BITMAP inconsistencies io_bitmap_exit() is invoked from exit_thread… |
CVE-2025-38095 | High | 7.8 | 2025-07-03 | In the Linux kernel, the following vulnerability has been resolved: dma-buf: insert memory barrier before updating num_fences smp_store_mb() inserts memory b… |
CVE-2025-38092 | High | 8.8 | 2025-07-02 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: use list_first_entry_or_null for opinfo_get_list() The list_first_entry() macro ne… |
CVE-2025-38089 | Critical | 9.8 | 2025-06-30 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error tianshuo han reported… |
CVE-2025-6858 | Low | 3.3 | 2025-06-29 | A vulnerability was found in HDF5 1.14.6 and classified as problematic. Affected by this issue is the function H5C__flush_single_entry of the file src/H5Centry… |
CVE-2025-45333 | High | 7.5 | 2025-06-25 | berkeley-abc abc 1.1 contains a Null Pointer Dereference (NPD) vulnerability in the Abc_NtkCecFraigPart function of its data processing module, leading to unpr… |
CVE-2025-45332 | High | 7.5 | 2025-06-25 | vkoskiv c-ray 1.1 contains a Null Pointer Dereference (NPD) vulnerability in the parse_mtllib function of its data processing module, leading to unpredictable… |
CVE-2025-6496 | Low | 3.3 | 2025-06-23 | A vulnerability was found in HTACG tidy-html5 5.8.0. It has been declared as problematic. This vulnerability affects the function InsertNodeAsParent of the fil… |
CVE-2025-6375 | Low | 3.3 | 2025-06-21 | A vulnerability was found in poco up to 1.14.1. It has been rated as problematic. Affected by this issue is the function MultipartInputStream of the file Net/s… |
CVE-2025-45331 | High | 7.5 | 2025-06-20 | brplot v420.69.1 contains a Null Pointer Dereference (NPD) vulnerability in the br_dagens_handle_once function of its data processing module, leading to unpred… |
CVE-2025-48705 | High | 7.5 | 2025-06-20 | An issue was discovered in COROS PACE 3 through 3.0808.0. Due to a NULL pointer dereference vulnerability, sending a crafted BLE message forces the device to r… |
CVE-2022-50218 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: iio: light: isl29028: Fix the warning in isl29028_remove() The driver use the non-managed… |
CVE-2022-50206 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: arm64: fix oops in concurrently setting insn_emulation sysctls emulation_proc_handler() c… |
CVE-2022-50181 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: virtio-gpu: fix a missing check to avoid NULL dereference 'cache_ent' could be set NULL i… |
CVE-2022-50148 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: kernfs: fix potential NULL dereference in __kernfs_remove When lockdep is enabled, lockde… |
CVE-2022-50145 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: sf-pdma: Add multithread support for a DMA channel When we get a DMA channel a… |
CVE-2022-50144 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: soundwire: revisit driver bind/unbind and callbacks In the SoundWire probe, we store a po… |
CVE-2022-50135 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix BUG: KASAN: null-ptr-deref in rxe_qp_do_cleanup The function rxe_create_qp… |
CVE-2022-50133 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: usb: xhci_plat_remove: avoid NULL dereference Since commit 4736ebd7fcaff1eb8481c140ba4949… |
CVE-2022-50132 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadge… |
CVE-2022-50091 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: locking/csd_lock: Change csdlock_debug from early_param to __setup The csdlock_debug kern… |
CVE-2022-50080 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: tee: add overflow check in register_shm_helper() With special lengths supplied by user sp… |
CVE-2022-50078 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: tracing/eprobes: Do not allow eprobes to use $stack, or % for regs While playing with eve… |
CVE-2022-50075 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: tracing/eprobes: Have event probes be consistent with kprobes and uprobes Currently, if a… |
CVE-2022-50073 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null Fixes… |
CVE-2022-50069 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: BPF: Fix potential bad pointer dereference in bpf_sys_bpf() The bpf_sys_bpf() helper func… |
CVE-2022-50068 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Fix dummy res NULL ptr deref bug Check the bo->resource value before accessing t… |
CVE-2022-50063 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: felix: suppress non-changes to the tagging protocol The way in which dsa_tree_c… |
CVE-2022-50058 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: vdpa_sim_blk: set number of address spaces and virtqueue groups Commit bda324fd037a ("vdp… |
CVE-2022-50057 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr If ntfs_fill_super() wasn't called then s… |
CVE-2022-50056 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix missing i_op in ntfs_read_mft There is null pointer dereference because i_o… |
CVE-2022-50054 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: iavf: Fix NULL pointer dereference in iavf_get_link_ksettings Fix possible NULL pointer d… |
CVE-2022-50049 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: ASoC: DPCM: Don't pick up BE without substream When DPCM tries to add valid BE connection… |
CVE-2022-50047 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6060: prevent crash on an unused port If the port isn't a CPU port nor a u… |
CVE-2022-50024 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-axi-dmac: do not print NULL LLI during error During debugging we have seen… |
CVE-2022-50016 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: cnl: Do not process IPC reply before firmware boot It is not yet clear… |
CVE-2022-50015 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot It is not yet cl… |
CVE-2022-50009 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix null-ptr-deref in f2fs_get_dnode_of_data There is issue as follows when test f2… |
CVE-2022-50004 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: xfrm: policy: fix metadata dst->dev xmit null pointer dereference When we try to transmit… |
CVE-2022-50003 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: ice: xsk: prohibit usage of non-balanced queue id Fix the following scenario: 1. ethtool… |
CVE-2022-50002 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, fix logic over MLX5_LAG_FLAG_NDEVS_READY Only set MLX5_LAG_FLAG_NDEVS_READ… |
CVE-2022-49989 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix error exit of privcmd_ioctl_dm_op() The error exit of privcmd_ioctl_dm_o… |
CVE-2022-49984 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report It is possible f… |
CVE-2022-49977 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead ftrace_s… |
CVE-2022-49974 | High | 8.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: fix rumble worker null pointer deref We can dereference a null pointer try… |
CVE-2022-49973 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: skmsg: Fix wrong last sg check in sk_msg_recvmsg() Fix one kernel NULL pointer dereferenc… |
CVE-2022-49962 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: xhci: Fix null pointer dereference in remove if xHC has only one roothub The remove path… |
CVE-2022-49960 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: fix null pointer dereference Asus chromebook CX550 crashes during boot on v5.17… |
CVE-2022-49955 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: Fix RTAS MSR[HV] handling for Cell The semi-recent changes to MSR handling… |
CVE-2022-49947 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: binder: fix alloc->vma_vm_mm null-ptr dereference Syzbot reported a couple issues introdu… |
CVE-2022-49944 | High | 7.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: Revert "usb: typec: ucsi: add a common function ucsi_unregister_connectors()" The recent… |
CVE-2022-49942 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected When we are not… |
CVE-2022-49940 | Medium | 5.5 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf() A null pointer derefer… |
CVE-2025-38075 | Critical | 9.8 | 2025-06-18 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix timeout on deleted connection NOPIN response timer may expire on… |