CWE-476 · NULL Pointer Dereference (page 2)
Page 2 of 56 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-58101 | High | 7.5 | 2026-07-13 | Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference. X509V3_EXT_d2i(ext) returns NULL when an extension's… |
CVE-2026-55783 | | 2026-07-10 | NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, NanaZip's seven in-house IInArchive handlers in NanaZip.Codecs… | |
CVE-2026-21901 | Medium | 4.4 | 2026-07-09 | A NULL Pointer Dereference vulnerability in the management daemon (mgd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, high-privileged attac… |
CVE-2026-60109 | High | 7.5 | 2026-07-09 | Zeek before 8.0.9 contains a null pointer dereference vulnerability in its Kerberos protocol analyzer that allows unauthenticated remote attackers to crash the… |
CVE-2026-15184 | Low | 3.3 | 2026-07-09 | A vulnerability was found in GNU LibreDWG up to 0.13.4. The impacted element is the function dwg_next_entity of the file src/dwg.c of the component DWG File Ha… |
CVE-2026-56288 | Medium | 5.5 | 2026-07-09 | GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of consecutive end-of-file… |
CVE-2026-15171 | Medium | 5.5 | 2026-07-08 | SSH protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service |
CVE-2026-58250 | High | 7.5 | 2026-07-08 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.12.8 and 2.11.17, an unauthenticated peer with net… |
CVE-2026-44512 | Medium | 5.5 | 2026-07-08 | Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.9.0 before 1.22.0, onnx.version_converter.convert_version… |
CVE-2026-50812 | Medium | 5.5 | 2026-07-08 | A NULL pointer dereference in the SQLite Session Extension in SQLite 3.53.1 and SQLite trunk builds before check-in e807d4e3798efd53 allows an attacker who can… |
CVE-2026-50810 | Medium | 5.5 | 2026-07-07 | A NULL pointer dereference in smooth_parse_stream_index() in src/media_tools/mpd.c in GPAC master HEAD before commit b35c61f104b85fbb16520ac2838d5d2ef70845b5 a… |
CVE-2026-10659 | Medium | 4.7 | 2026-07-07 | The Dhara flash translation layer disk driver (drivers/disk/ftl_dhara.c) implemented the dhara_nand_ callbacks so that, on a flash error, the error code was wr… |
CVE-2026-38976 | High | 7.5 | 2026-07-06 | mrubyc through 3.4.1 was found to contain a NULL pointer dereference in src/vm.c in op_super() / OP_SUPER due to a missing runtime guard for top-level super. |
CVE-2026-48267 | Medium | 5.5 | 2026-07-06 | DNG SDK versions 1.7.1 2536 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An atta… |
CVE-2026-14790 | Low | 3.3 | 2026-07-06 | A flaw has been found in GPAC 26.02.0. This affects the function nhmldump_send_frame of the file src/filters/write_nhml.c of the component Media File Handler… |
CVE-2026-10656 | Medium | 4.6 | 2026-07-05 | The MAX32xxx USB device controller driver (drivers/usb/udc/udc_max32.c, compatible adi_max32_usbhs) dereferenced an endpoint buffer in its OUT and IN transfer-… |
CVE-2026-13084 | High | 7.5 | 2026-07-03 | A null pointer dereference vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to create a denial-of-service (DoS) condition by… |
CVE-2026-36912 | High | 7.5 | 2026-07-01 | A NULL pointer dereference in the AP4_AtomSampleTable::GetSample() function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of… |
CVE-2026-36909 | Medium | 6.2 | 2026-07-01 | A NULL pointer dereference in the AP4_TkhdAtom::GetTrackId() function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Servic… |
CVE-2026-14324 | Medium | 6.5 | 2026-07-01 | RAOP module accepts unbounded Content-Length values and does not check the pw_array_add() return. |
CVE-2026-53355 | Critical | 9.8 | 2026-07-01 | In the Linux kernel, the following vulnerability has been resolved: net: rds: clear i_sends on setup unwind The RDS IB connection teardown path is written so… |
CVE-2026-53350 | Medium | 5.5 | 2026-07-01 | In the Linux kernel, the following vulnerability has been resolved: ASoC: wm_adsp: Fix NULL dereference when removing firmware controls In wm_adsp_control_re… |
CVE-2026-53348 | Medium | 5.5 | 2026-07-01 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions sdca_dev_unregi… |
CVE-2026-53339 | Medium | 5.5 | 2026-07-01 | In the Linux kernel, the following vulnerability has been resolved: i2c: qcom-cci: Fix NULL pointer dereference in cci_remove() On all modern platforms Qualc… |
CVE-2026-53338 | Medium | 5.5 | 2026-07-01 | In the Linux kernel, the following vulnerability has been resolved: net: airoha: Add NULL check for of_reserved_mem_lookup() in airoha_qdma_init_hfwd_queues()… |
CVE-2026-53337 | Medium | 5.5 | 2026-07-01 | In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix NULL pointer dereference in bond_do_ioctl() In bond_do_ioctl(), slave_d… |
CVE-2026-53335 | Medium | 5.5 | 2026-07-01 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/lru_sort: handle ctx allocation failure DAMON_LRU_SORT allocates the damon_ctx o… |
CVE-2026-53334 | Medium | 5.5 | 2026-07-01 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/reclaim: handle ctx allocation failure Patch series "mm/damon/{reclaim,lru_sort}… |
CVE-2026-20457 | Medium | 5.3 | 2026-07-01 | In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base… |
CVE-2026-58369 | Medium | 5.3 | 2026-06-30 | Woodpecker before 3.15.0 registers the /api/orgs/lookup/*org_full_name endpoint without authentication middleware, and the LookupOrg handler unconditionally de… |
CVE-2026-10648 | Medium | 6.2 | 2026-06-29 | mcumgr_serial_process_frag() in subsys/mgmt/mcumgr/transport/src/serial_util.c calls net_buf_reset() on the result of smp_packet_alloc() before checking it for… |
CVE-2026-56017 | High | 7.5 | 2026-06-29 | JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful token of the input is a slash. The rege… |
CVE-2026-53325 | Medium | 5.5 | 2026-06-29 | In the Linux kernel, the following vulnerability has been resolved: agp/amd64: Fix broken error propagation in agp_amd64_probe() A NULL pointer dereference w… |
CVE-2026-10593 | Medium | 6.5 | 2026-06-28 | The Zephyr Bluetooth LE Audio Basic Audio Profile (BAP) unicast client mishandles peer-supplied ASE state notifications. In unicast_client_ep_qos_state() (subs… |
CVE-2026-53324 | Medium | 5.5 | 2026-06-26 | In the Linux kernel, the following vulnerability has been resolved: net: mana: Use pci_name() for debugfs directory naming Use pci_name(pdev) for the per-dev… |
CVE-2026-53318 | Medium | 5.5 | 2026-06-26 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_tx_check_aggr() Move the N… |
CVE-2026-53316 | Medium | 5.5 | 2026-06-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/ras: Fix NULL deref in ras_core_ras_interrupt_detected() Fixes a NULL pointer der… |
CVE-2026-53315 | Medium | 5.5 | 2026-06-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/ras: Fix NULL deref in ras_core_get_utc_second_timestamp() ras_core_get_utc_secon… |
CVE-2026-53313 | Medium | 5.5 | 2026-06-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths In dc_dmub_srv_log_dia… |
CVE-2026-53307 | Medium | 5.5 | 2026-06-26 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: pinconf-generic: Fully validate 'pinmux' property The pinconf_generic_parse_dt_p… |
CVE-2026-53305 | Medium | 5.5 | 2026-06-26 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: ps883x: Fix Oops at unbind When trying to unbind a device in order to bind to… |
CVE-2026-53302 | Medium | 5.5 | 2026-06-26 | In the Linux kernel, the following vulnerability has been resolved: crypto: eip93 - fix hmac setkey algo selection eip93_hmac_setkey() allocates a temporary… |
CVE-2026-53301 | Medium | 5.5 | 2026-06-26 | In the Linux kernel, the following vulnerability has been resolved: reset: amlogic: t7: Fix null reset ops Fix missing reset ops causing kernel null pointer… |
CVE-2026-53299 | Medium | 5.5 | 2026-06-26 | In the Linux kernel, the following vulnerability has been resolved: net: airoha: Move ndesc initialization at end of airoha_qdma_init_tx() If queue entry lis… |
CVE-2026-53298 | Medium | 5.5 | 2026-06-26 | In the Linux kernel, the following vulnerability has been resolved: net: airoha: Move ndesc initialization at end of airoha_qdma_init_rx_queue() If queue ent… |
CVE-2026-53297 | Medium | 5.5 | 2026-06-26 | In the Linux kernel, the following vulnerability has been resolved: net: mana: Guard mana_remove against double invocation If PM resume fails (e.g., mana_att… |
CVE-2026-53291 | Medium | 5.5 | 2026-06-26 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/conexant: Fix missing error check for jack detection In cx_probe(), the return… |
CVE-2026-53289 | Medium | 5.5 | 2026-06-26 | In the Linux kernel, the following vulnerability has been resolved: ice: fix NULL pointer dereference in ice_reset_all_vfs() ice_reset_all_vfs() ignores the… |
CVE-2026-53284 | High | 7.5 | 2026-06-26 | In the Linux kernel, the following vulnerability has been resolved: btrfs: only release the dirty pages io tree after successful writes [WARNING] With extra… |
CVE-2026-53283 | Medium | 5.5 | 2026-06-26 | In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Bounds-check devid in __rlookup_amd_iommu() iommu_device_register() walks ever… |
CVE-2026-53281 | High | 8.8 | 2026-06-26 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption Commit 60f030f7418d ("i… |
CVE-2026-53280 | Medium | 5.5 | 2026-06-26 | In the Linux kernel, the following vulnerability has been resolved: iommu: Fix NULL group->domain dereference in pci_dev_reset_iommu_done() Local sashiko rev… |
CVE-2026-53278 | Medium | 5.5 | 2026-06-26 | In the Linux kernel, the following vulnerability has been resolved: arm_mpam: Check whether the config array is allocated before destroying it __destroy_comp… |
CVE-2026-47220 | High | 7.5 | 2026-06-26 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.37.0 until 1.37.5 and 1.38.3, when the %REQUESTED_SERVER_NAME(X:Y… |
CVE-2026-47221 | Medium | 5.9 | 2026-06-26 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.18.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, the router filter… |
CVE-2026-47204 | Medium | 6.5 | 2026-06-26 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.26.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, the envoy.filters… |
CVE-2026-9639 | Medium | 6.5 | 2026-06-26 | Nil-pointer dereference in CreateCustomVolumeFromBackup in LXD up to version 6.8 and 5.21 on Linux allows an authenticated user with can_create_storage_volumes… |
CVE-2026-57875 | High | 7.5 | 2026-06-26 | An unauthenticated NULL pointer dereference vulnerability exists in the HTTP request parsing logic of multiple CGI components in GeoVision GV-LPC2011 and GV-LP… |
CVE-2026-57873 | High | 7.5 | 2026-06-26 | An unauthenticated NULL pointer dereference vulnerability exists in IEEE8021x_upload.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerab… |
CVE-2026-9716 | High | 7.5 | 2026-06-25 | CWE-476 NULL Pointer Dereference vulnerability exists that could cause a denial-of-service condition, rendering the device’s HMI and configuration functionalit… |
CVE-2026-57434 | High | 7.5 | 2026-06-25 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri contains a bug when calling certain methods on all… |
CVE-2026-53271 | Medium | 5.5 | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix NULL-deref of opinfo->conn in oplock/lease break notifiers smb2_oplock_break_n… |
CVE-2026-53242 | High | 7.8 | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams snd_pcm_dr… |
CVE-2026-53237 | Medium | 5.5 | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: gpio: mvebu: fix NULL pointer dereference in suspend/resume mvebu_pwm_suspend() and mvebu… |
CVE-2026-53220 | Medium | 5.5 | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: netfilter: revalidate bridge ports ebt_redirect_tg() dereferences br_port_get_rcu() retur… |
CVE-2026-53214 | Medium | 5.5 | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix a potential NPD in cleanup_prefix_route() addrconf_get_prefix_route() can retur… |
CVE-2026-53204 | Medium | 5.5 | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-rsu: Fix NULL deref on rsu_send_msg() timeout in probe rsu_send_msg()… |
CVE-2026-53177 | Medium | 5.5 | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix NULL pointer dereference PCIe errors detected by a Root Port or Downstream P… |
CVE-2026-53165 | High | 7.5 | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: iomap: avoid potential null folio->mapping deref during error reporting When a buffered r… |
CVE-2026-53163 | Medium | 5.5 | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued syzbot triggered the fo… |
CVE-2026-53158 | Medium | 5.5 | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix NULL pointer dereference in rpmsg callback A NULL pointer dereference… |
CVE-2026-53152 | Medium | 5.5 | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: mmc: dw_mmc-rockchip: Add missing private data for very old controllers The really old co… |
CVE-2026-53144 | Medium | 5.5 | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix NULL dereference in get_queue_ids() When usr_queue_id_array is NULL and n… |
CVE-2026-53135 | Medium | 5.5 | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs [Why & How] dp_sdp_me… |
CVE-2025-60473 | Medium | 5.5 | 2026-06-25 | A NULL pointer dereference in the gf_filter_in_parent_chain function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to caus… |
CVE-2026-53111 | Medium | 5.5 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap The bpf_… |
CVE-2026-53105 | Medium | 5.5 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: prevent NULL vif dereference in mt7925_mac_write_txwi Check for a NUL… |
CVE-2026-53096 | High | 7.8 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path The DEVMAP_HASH branch i… |
CVE-2026-53093 | Medium | 5.5 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix error pointer dereference The function brcmf_chip_add_core() can retu… |
CVE-2026-53080 | Medium | 5.5 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_fw: fix NULL dereference of "old" filters before change() Like pointed out… |
CVE-2026-53073 | Medium | 5.5 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error When hci_register_dev() fails in… |
CVE-2026-53069 | High | 7.5 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master syzkaller reported… |
CVE-2026-53066 | Medium | 5.5 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: drm/sun4i: backend: fix error pointer dereference The function drm_atomic_get_plane_state… |
CVE-2026-53064 | Medium | 5.5 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: dm cache: fix null-deref with concurrent writes in passthrough mode In passthrough mode… |
CVE-2026-53058 | Medium | 5.5 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable()… |
CVE-2026-53048 | Medium | 5.5 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: gfs2: prevent NULL pointer dereference during unmount When flushing out outstanding glock… |
CVE-2026-53034 | Medium | 5.5 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix af_unix null-ptr-deref in proto update unix_stream_connect() sets sk_st… |
CVE-2026-53032 | Medium | 5.5 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL deref in map_kptr_match_type for scalar regs Commit ab6c637ad027 ("bpf: Fix… |
CVE-2026-53028 | Medium | 5.5 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: Fix error pointer dereference The variable tps->partner is checked for an err… |
CVE-2026-53012 | Medium | 5.5 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: nexthop: fix IPv6 route referencing IPv4 nexthop syzbot reported a panic [1] [2]. When a… |
CVE-2026-53007 | Medium | 5.5 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: ice: fix potential NULL pointer deref in error path of ice_set_ringparam() ice_set_ringpa… |
CVE-2026-52998 | High | 7.5 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check The nf_osf_ttl() fu… |
CVE-2026-52997 | Medium | 5.5 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_dualpi2: drain both C-queue and L-queue in dualpi2_change() Fix dualpi2_ch… |
CVE-2026-52986 | Critical | 9.8 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: don't use simple_strtoul Replace unsafe port parsing in epad… |
CVE-2026-52980 | Medium | 5.5 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: sched/fair: Clear rel_deadline when initializing forked entities A yield-triggered crash… |
CVE-2026-52957 | High | 7.5 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential null-ptr-deref in decode_choose_args() A message of type CEPH_MSG_… |
CVE-2026-52951 | High | 7.8 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/dma-buf: handle empty bo and UAF races There look to be some nasty races here when… |
CVE-2026-52941 | Medium | 5.5 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint The smc_msg_event trac… |
CVE-2026-52939 | Medium | 5.5 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion rds_ib_x… |
CVE-2026-52938 | Medium | 5.5 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL pointer dereference in bpf_sk_storage_clone and diag paths bpf_selem_unlink… |