CWE-476 · NULL Pointer Dereference (page 24)
Page 24 of 57 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-12227 | Medium | 5.5 | 2024-12-05 | A vulnerability, which was classified as problematic, was found in MSI Dragon Center up to 2.0.146.0. This affects the function MmUnMapIoSpace in the library N… |
CVE-2024-53131 | Medium | 5.5 | 2024-12-04 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint Patch series "nilfs2: fix nul… |
CVE-2024-53130 | Medium | 5.5 | 2024-12-04 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint When using the "block:block_d… |
CVE-2024-53129 | Medium | 5.5 | 2024-12-04 | In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: vop: Fix a dereferenced before check warning The 'state' can't be NULL, we… |
CVE-2024-52546 | Medium | 5.3 | 2024-12-03 | An unauthenticated attacker can perform a null pointer dereference in the DHIP Service (UDP port 37810). This vulnerability has been resolved in firmware versi… |
CVE-2024-53120 | High | 7.5 | 2024-12-02 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: CT: Fix null-ptr-deref in add rule err flow In error flow of mlx5_tc_ct_entry_… |
CVE-2024-53115 | Medium | 5.5 | 2024-12-02 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: avoid null_ptr_deref in vmw_framebuffer_surface_create_handle The 'vmw_user_o… |
CVE-2024-53113 | Medium | 5.5 | 2024-12-02 | In the Linux kernel, the following vulnerability has been resolved: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof We triggered a NULL pointer d… |
CVE-2024-12002 | Medium | 4.3 | 2024-11-30 | A vulnerability classified as problematic was found in Tenda FH451, FH1201, FH1202 and FH1206 up to 20241129. Affected by this vulnerability is the function we… |
CVE-2024-36620 | Medium | 6.5 | 2024-11-29 | moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go. |
CVE-2024-36626 | Medium | 5.3 | 2024-11-29 | In prestashop 8.1.4, a NULL pointer dereference was identified in the math_round function within Tools.php. |
CVE-2024-42329 | Low | 3.3 | 2024-11-27 | The webdriver for the Browser object expects an error object to be initialized when the webdriver_session_query function fails. But this function can fail for… |
CVE-2024-42328 | Low | 3.3 | 2024-11-27 | When the webdriver for the Browser object downloads data from a HTTP server, the data pointer is set to NULL and is allocated only in curl_write_cb when receiv… |
CVE-2024-11706 | Medium | 6.5 | 2024-11-26 | A null pointer dereference may have inadvertently occurred in `pk12util`, and specifically in the `SEC_ASN1DecodeItem_Util` function, when handling malformed o… |
CVE-2024-11705 | Critical | 9.1 | 2024-11-26 | `NSC_DeriveKey` inadvertently assumed that the `phKey` parameter is always non-NULL. When it was passed as NULL, a segmentation fault (SEGV) occurred, leading… |
CVE-2024-11650 | Medium | 6.5 | 2024-11-25 | A vulnerability was found in Tenda i9 1.0.0.8(3828) and classified as critical. This issue affects the function websReadEvent of the file /goform/GetIPTV. The… |
CVE-2024-37048 | Medium | 4.9 | 2024-11-22 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote… |
CVE-2024-37045 | Medium | 4.9 | 2024-11-22 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote… |
CVE-2024-37042 | Medium | 4.9 | 2024-11-22 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote… |
CVE-2024-53092 | High | 8.4 | 2024-11-21 | In the Linux kernel, the following vulnerability has been resolved: virtio_pci: Fix admin vq cleanup by using correct info pointer vp_modern_avq_cleanup() an… |
CVE-2024-11588 | Low | 3.5 | 2024-11-21 | A vulnerability was found in AVL-DiTEST-DiagDev libdoip 1.0.0. It has been rated as problematic. This issue affects the function DoIPConnection::reactOnReceive… |
CVE-2024-53069 | Medium | 5.5 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: fix a NULL-pointer dereference Some SCM calls can be invoked with __… |
CVE-2024-53064 | Medium | 5.5 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: idpf: fix idpf_vc_core_init error path In an event where the platform running the device… |
CVE-2024-53060 | Medium | 5.5 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported acpi_evaluate_objec… |
CVE-2024-53056 | Medium | 5.5 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() In mtk_crtc_create()… |
CVE-2024-53050 | Medium | 5.5 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/hdcp: Add encoder check in hdcp2_get_capability Add encoder check in intel_hdcp2… |
CVE-2024-53043 | Medium | 5.5 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: mctp i2c: handle NULL header address daddr can be NULL if there is no neighbour table ent… |
CVE-2024-50298 | Medium | 5.5 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: net: enetc: allocate vf_state during PF probes In the previous implementation, vf_state i… |
CVE-2024-50296 | Medium | 5.5 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash when uninstalling driver When the driver is uninstalled and t… |
CVE-2024-50292 | Medium | 5.5 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove In case of error wh… |
CVE-2024-50281 | High | 7.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation When sealing or unseali… |
CVE-2024-50277 | Medium | 4.7 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: dm: fix a crash if blk_alloc_disk fails If blk_alloc_disk fails, the variable md->disk is… |
CVE-2024-50265 | Medium | 5.5 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() Syzkaller i… |
CVE-2024-48294 | Medium | 5.5 | 2024-11-18 | A NULL pointer dereference in the component libPdfCore.dll of Wondershare PDF Reader v1.0.9.2544 allows attackers to cause a Denial of Service (DoS) via a craf… |
CVE-2024-45969 | High | 7.5 | 2024-11-15 | NULL pointer dereference in the MMS Client in MZ Automation LibIEC1850 before commit 7afa40390b26ad1f4cf93deaa0052fe7e357ef33 allows a malicious server to Caus… |
CVE-2024-24446 | Medium | 6.5 | 2024-11-15 | An uninitialized pointer dereference in OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Service (DoS) via a crafted InitialContext… |
CVE-2024-9472 | | 2024-11-14 | A null pointer dereference in Palo Alto Networks PAN-OS software on PA-800 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series hardware platforms when D… | |
CVE-2024-2551 | High | 7.5 | 2024-11-14 | A null pointer dereference vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop a core system service on the firewal… |
CVE-2024-2550 | High | 7.5 | 2024-11-14 | A null pointer dereference vulnerability in the GlobalProtect gateway in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop the Glo… |
CVE-2024-34719 | High | 7.8 | 2024-11-13 | In multiple locations, there is a possible permissions bypass due to a missing null check. This could lead to local escalation of privilege with no additional… |
CVE-2024-47439 | Medium | 5.5 | 2024-11-12 | Substance3D - Painter versions 10.1.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-servic… |
CVE-2024-47458 | Medium | 5.5 | 2024-11-12 | Bridge versions 13.0.9, 14.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An a… |
CVE-2024-47457 | Medium | 5.5 | 2024-11-12 | Illustrator versions 28.7.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An atta… |
CVE-2024-8495 | High | 7.5 | 2024-11-12 | A null pointer dereference in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a remote unauthenticated at… |
CVE-2024-52296 | Medium | 6.5 | 2024-11-12 | libosdp is an implementation of IEC 60839-11-5 OSDP (Open Supervised Device Protocol) and provides a C library with support for C++, Rust and Python3. At ospd_… |
CVE-2024-50318 | High | 7.5 | 2024-11-12 | A null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service. |
CVE-2024-50317 | High | 7.5 | 2024-11-12 | A null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service. |
CVE-2024-47586 | Medium | 5.3 | 2024-11-12 | SAP NetWeaver Application Server for ABAP and ABAP Platform allows an unauthenticated attacker to send a maliciously crafted http request which could cause a n… |
CVE-2024-50260 | Medium | 4.7 | 2024-11-09 | In the Linux kernel, the following vulnerability has been resolved: sock_map: fix a NULL pointer dereference in sock_map_link_update_prog() The following rac… |
CVE-2024-50255 | Medium | 5.5 | 2024-11-09 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs Fix __hci_cmd_sync_sk() t… |
CVE-2024-50240 | Medium | 5.5 | 2024-11-09 | In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb: fix NULL-deref on runtime suspend Commit 413db06c05e7 ("phy: qcom-qmp… |
CVE-2024-50239 | Medium | 5.5 | 2024-11-09 | In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend Commit 413db06c05e7 ("phy: q… |
CVE-2024-50238 | Medium | 5.5 | 2024-11-09 | In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend Commit 413db06c05e7 ("phy: qcom-qm… |
CVE-2024-50225 | High | 7.8 | 2024-11-09 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix error propagation of split bios The purpose of btrfs_bbio_propagate_error() sh… |
CVE-2024-50224 | Medium | 5.5 | 2024-11-09 | In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-dspi: Fix crash when not using GPIO chip select Add check for the return val… |
CVE-2024-50223 | Medium | 5.5 | 2024-11-09 | In the Linux kernel, the following vulnerability has been resolved: sched/numa: Fix the potential null pointer dereference in task_numa_work() When running s… |
CVE-2024-27532 | High | 7.5 | 2024-11-08 | wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) 06df58f is vulnerable to NULL Pointer Dereference in function `block_type_get_result_types. |
CVE-2024-50198 | Medium | 5.5 | 2024-11-08 | In the Linux kernel, the following vulnerability has been resolved: iio: light: veml6030: fix IIO device retrieval from embedded device The dev pointer that… |
CVE-2024-50160 | Medium | 5.5 | 2024-11-07 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs8409: Fix possible NULL dereference If snd_hda_gen_add_kctl fails to allocate… |
CVE-2024-50156 | Medium | 5.5 | 2024-11-07 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: Avoid NULL dereference in msm_disp_state_print_regs() If the allocation in msm_d… |
CVE-2024-50153 | Medium | 5.5 | 2024-11-07 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix null-ptr-deref in target_alloc_device() There is a null-ptr-deref… |
CVE-2024-50147 | Medium | 5.5 | 2024-11-07 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix command bitmask initialization Command bitmask have a dedicated bit for MAN… |
CVE-2024-50146 | Medium | 5.5 | 2024-11-07 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Don't call cleanup on profile rollback failure When profile rollback fails in… |
CVE-2024-50145 | High | 7.5 | 2024-11-07 | In the Linux kernel, the following vulnerability has been resolved: octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx() build_skb() re… |
CVE-2024-50133 | Medium | 5.5 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Don't crash in stack_top() for tasks without vDSO Not all tasks have a vDSO ma… |
CVE-2024-50132 | High | 7.8 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Fix MAX_TRACE_ARGS limit handling When creating a trace_probe we would se… |
CVE-2024-50122 | Medium | 5.5 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: PCI: Hold rescan lock while adding devices during host probe Since adding the PCI power c… |
CVE-2024-50118 | Medium | 5.5 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: btrfs: reject ro->rw reconfiguration if there are hard ro requirements [BUG] Syzbot repor… |
CVE-2024-50117 | High | 7.3 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: drm/amd: Guard against bad data for ATIF ACPI method If a BIOS provides bad data in respo… |
CVE-2024-50109 | Medium | 5.5 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix null ptr dereference in raid10_size() In raid10_run() if raid10_set_queue_… |
CVE-2024-50105 | Medium | 5.5 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: sc7280: Fix missing Soundwire runtime stream alloc Commit 15c7fab0e047 ("ASoC… |
CVE-2024-50104 | Medium | 5.5 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: sdm845: add missing soundwire runtime stream alloc During the migration of So… |
CVE-2024-50103 | Medium | 5.5 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe() A devm_kzalloc()… |
CVE-2023-52920 | High | 7.8 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: bpf: support non-r10 register spill/fill to/from stack in precision tracking Use instruct… |
CVE-2024-10750 | Medium | 6.5 | 2024-11-04 | A vulnerability has been found in Tenda i22 1.0.0.3(4687) and classified as problematic. Affected by this vulnerability is the function websReadEvent of the fi… |
CVE-2024-22733 | High | 7.5 | 2024-11-01 | TP Link MR200 V4 Firmware version 210201 was discovered to contain a null-pointer-dereference in the web administration panel on /cgi/login via the sign, Actio… |
CVE-2024-50070 | Medium | 5.5 | 2024-10-29 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: stm32: check devm_kasprintf() returned value devm_kasprintf() can return a NULL… |
CVE-2024-50069 | Medium | 5.5 | 2024-10-29 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: apple: check devm_kasprintf() returned value devm_kasprintf() can return a NULL… |
CVE-2024-44101 | High | 7.5 | 2024-10-25 | there is a possible Null Pointer Dereference (modem crash) due to improper input validation. This could lead to remote denial of service with no additional exe… |
CVE-2024-20426 | High | 8.6 | 2024-10-23 | A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol for VPN termination of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firep… |
CVE-2024-20339 | High | 8.6 | 2024-10-23 | A vulnerability in the TLS processing feature of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series could allow an unauthenticated… |
CVE-2024-10280 | Medium | 6.5 | 2024-10-23 | A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022. It has been rated as problematic. This issue a… |
CVE-2024-40493 | Critical | 9.8 | 2024-10-22 | Null Pointer Dereference in `coap_client_exchange_blockwise2` function in Keith Cullen FreeCoAP 1.0 allows remote attackers to cause a denial of service and po… |
CVE-2023-52919 | Medium | 5.5 | 2024-10-22 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix possible NULL pointer dereference in send_acknowledge() Handle memory alloc… |
CVE-2023-52918 | Medium | 5.5 | 2024-10-22 | In the Linux kernel, the following vulnerability has been resolved: media: pci: cx23885: check cx23885_vdev_init() return cx23885_vdev_init() can return a NU… |
CVE-2024-50062 | High | 7.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Avoid null pointer deref during path establishment For RTRS path establish… |
CVE-2024-50058 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: serial: protect uart_port_dtr_rts() in uart_shutdown() too Commit af224ca2df29 (serial: c… |
CVE-2024-50056 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c Fix potential dereferencing of ER… |
CVE-2024-50049 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check null pointer before dereferencing se [WHAT & HOW] se is null check… |
CVE-2024-50048 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: fbcon: Fix a NULL pointer dereference issue in fbcon_putcs syzbot has found a NULL pointe… |
CVE-2024-50046 | Critical | 9.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() On the node of an NFS… |
CVE-2024-50045 | High | 7.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: netfilter: br_netfilter: fix panic with metadata_dst skb Fix a kernel panic in the br_net… |
CVE-2024-50039 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net/sched: accept TCA_STAB only for root qdisc Most qdiscs maintain their backlog using q… |
CVE-2024-50034 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix lacks of icsk_syn_mss with IPPROTO_SMC Eric report a panic on IPPROTO_SMC, a… |
CVE-2022-49021 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net: phy: fix null-ptr-deref while probe() failed I got a null-ptr-deref report as follow… |
CVE-2022-49019 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: nixge: fix NULL dereference In function nixge_hw_dma_bd_release() derefere… |
CVE-2022-49010 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (coretemp) Check for null before removing sysfs attrs If coretemp_add_core() gets… |
CVE-2022-49009 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (asus-ec-sensors) Add checks for devm_kcalloc As the devm_kcalloc may return NULL… |
CVE-2022-49007 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() Syzbot reported… |
CVE-2022-48992 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-pcm: Add NULL check in BE reparenting Add NULL check in dpcm_be_reparent API, t… |