CWE-476 · NULL Pointer Dereference (page 26)
Page 26 of 56 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-43357 | High | 8.6 | 2024-08-15 | ECMA-262 is the language specification for the scripting language ECMAScript. A problem in the ECMAScript (JavaScript) specification of async generators, intro… |
CVE-2024-41866 | Medium | 5.5 | 2024-08-14 | InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-ser… |
CVE-2024-41164 | Medium | 5.9 | 2024-08-14 | When TCP profile with Multipath TCP enabled (MPTCP) is configured on a Virtual Server, undisclosed traffic along with conditions beyond the attackers control c… |
CVE-2024-39395 | Medium | 5.5 | 2024-08-14 | InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-ser… |
CVE-2024-34138 | Medium | 5.5 | 2024-08-14 | Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS… |
CVE-2024-34137 | Medium | 5.5 | 2024-08-14 | Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS… |
CVE-2024-34136 | Medium | 5.5 | 2024-08-14 | Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS… |
CVE-2024-37399 | High | 7.5 | 2024-08-14 | A NULL pointer dereference in WLAvalancheService in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to crash the service, resulting in a DoS. |
CVE-2024-38146 | High | 7.5 | 2024-08-13 | Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability |
CVE-2024-38145 | High | 7.5 | 2024-08-13 | Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability |
CVE-2024-38126 | High | 7.5 | 2024-08-13 | Windows Network Address Translation (NAT) Denial of Service Vulnerability |
CVE-2024-7006 | High | 7.5 | 2024-08-12 | A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`. This issue may allow an attacker to trigger memory allocation failures through certai… |
CVE-2024-43167 | Low | 2.8 | 2024-08-12 | DISPUTE NOTE: this issue does not pose a security risk as it (according to analysis by the original software developer, NLnet Labs) falls within the expected f… |
CVE-2024-37826 | High | 7.5 | 2024-08-12 | A NULL pointer dereference in vercot Serva v4.6.0 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request. |
CVE-2024-42255 | Medium | 5.5 | 2024-08-08 | In the Linux kernel, the following vulnerability has been resolved: tpm: Use auth only after NULL check in tpm_buf_check_hmac_response() Dereference auth aft… |
CVE-2024-42254 | Medium | 5.5 | 2024-08-08 | In the Linux kernel, the following vulnerability has been resolved: io_uring: fix error pbuf checking Syz reports a problem, which boils down to NULL vs IS_E… |
CVE-2024-42248 | Medium | 5.5 | 2024-08-07 | In the Linux kernel, the following vulnerability has been resolved: tty: serial: ma35d1: Add a NULL check for of_node The pdev->dev.of_node can be NULL if th… |
CVE-2024-42235 | High | 7.8 | 2024-08-07 | In the Linux kernel, the following vulnerability has been resolved: s390/mm: Add NULL pointer check to crst_table_free() base_crst_free() crst_table_free() u… |
CVE-2024-36424 | Medium | 5.5 | 2024-08-06 | K7RKScan.sys in K7 Ultimate Security before 17.0.2019 allows local users to cause a denial of service (BSOD) because of a NULL pointer dereference. |
CVE-2024-23357 | Medium | 6.2 | 2024-08-05 | Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus. |
CVE-2024-39948 | High | 7.5 | 2024-07-31 | A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device t… |
CVE-2024-42151 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: bpf: mark bpf_dummy_struct_ops.test_1 parameter as nullable Test case dummy_st_ops/dummy_… |
CVE-2024-42149 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: fs: don't misleadingly warn during thaw operations The block device may have been frozen… |
CVE-2024-42144 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/mediatek/lvts_thermal: Check NULL ptr on lvts_data Verify that lvts_data… |
CVE-2024-42141 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Check socket flag instead of hcon This fixes the following Smatch static… |
CVE-2024-42134 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: virtio-pci: Check if is_avq is NULL [bug] In the virtio_pci_common.c function vp_del_vqs… |
CVE-2024-42125 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fw: scan offload prohibit all 6 GHz channel if no 6 GHz sband We have some p… |
CVE-2024-42122 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL pointer check for kzalloc [Why & How] Check return pointer of k… |
CVE-2024-42107 | Medium | 4.7 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: ice: Don't process extts if PTP is disabled The ice_ptp_extts_event() function can race w… |
CVE-2024-42101 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes In nouveau_conne… |
CVE-2024-42100 | Medium | 5.5 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: common: Don't call hw_to_ccu_common on hw without common In order to set t… |
CVE-2024-42099 | High | 7.8 | 2024-07-30 | In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix invalid dereferencing of indirect CCW data pointer Fix invalid dereferenci… |
CVE-2024-42091 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Check pat.ops before dumping PAT settings We may leave pat.ops unset when running… |
CVE-2024-42089 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl-asoc-card: set priv->pdev before using it priv->pdev pointer was set after bein… |
CVE-2024-42083 | High | 8.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ionic: fix kernel panic due to multi-buffer handling Currently, the ionic_run_xdp() doesn… |
CVE-2024-42081 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/xe_devcoredump: Check NULL before assignments Assign 'xe_devcoredump_snapshot *' a… |
CVE-2024-42079 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix NULL pointer dereference in gfs2_log_flush In gfs2_jindex_free(), set sdp->sd_j… |
CVE-2024-42074 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp: add a null check for chip_pdev structure When acp platform device creatio… |
CVE-2024-42069 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix possible double free in error handling path When auxiliary_device_add() re… |
CVE-2024-42065 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Add a NULL check in xe_ttm_stolen_mgr_init Add an explicit check to ensure that t… |
CVE-2024-41098 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Fix null pointer dereference on error If the ata_port_alloc() call in a… |
CVE-2024-41095 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes In nv17_tv_get… |
CVE-2024-41093 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid using null object of framebuffer Instead of using state->fb->obj[0] dir… |
CVE-2024-41089 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes In nv17_tv_get… |
CVE-2024-41085 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: cxl/mem: Fix no cxl_nvd during pmem region auto-assembling When CXL subsystem is auto-ass… |
CVE-2024-41084 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: cxl/region: Avoid null pointer dereference in region lookup cxl_dpa_to_region() looks up… |
CVE-2024-41083 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_page_mkwrite() to check folio->mapping is valid Fix netfs_page_mkwrite()… |
CVE-2024-41077 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: null_blk: fix validation of block size Block size should be between 512 and PAGE_SIZE and… |
CVE-2024-41060 | High | 7.8 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: drm/radeon: check bo_va->bo is non-NULL before using it The call to radeon_vm_clear_freed… |
CVE-2024-41055 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: mm: prevent derefencing NULL ptr in pfn_section_valid() Commit 5ec8e8ea8b77 ("mm/sparseme… |
CVE-2024-41054 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix ufshcd_clear_cmd racing issue When ufshcd_clear_cmd is racing with t… |
CVE-2024-41053 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix ufshcd_abort_one racing issue When ufshcd_abort_one is racing with t… |
CVE-2024-41048 | High | 7.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: skmsg: Skip zero length skb in sk_msg_recvmsg When running BPF selftests (./test_progs -t… |
CVE-2024-41037 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: fix null deref on system suspend entry When system enters suspend… |
CVE-2024-41030 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: discard write access to the directory open may_open() does not allow a directory t… |
CVE-2024-41836 | Medium | 5.5 | 2024-07-23 | InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-ser… |
CVE-2024-41130 | Medium | 5.4 | 2024-07-22 | llama.cpp provides LLM inference in C/C++. Prior to b3427, llama.cpp contains a null pointer dereference in gguf_init_from_file. This vulnerability is fixed in… |
CVE-2022-48865 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix kernel panic when enabling bearer When enabling a bearer on a node, a kernel pa… |
CVE-2022-48850 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net-sysfs: add check for netdevice being present to speed_show When bringing down the net… |
CVE-2022-48841 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: ice: fix NULL pointer dereference in ice_update_vsi_tx_ring_stats() It is possible to do… |
CVE-2022-48824 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: scsi: myrs: Fix crash in error case In myrs_detect(), cs->disable_intr is NULL when privd… |
CVE-2022-48816 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: lock against ->sock changing during sysfs read ->sock can be set to NULL asynchro… |
CVE-2022-48811 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: ibmvnic: don't release napi in __ibmvnic_open() If __ibmvnic_open() encounters an error s… |
CVE-2022-48793 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: nSVM: fix potential NULL derefernce on nested migration Turns out that due to r… |
CVE-2022-48781 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - get rid of alg_memory_allocated alg_memory_allocated does not seem to be… |
CVE-2022-48777 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: mtd: parsers: qcom: Fix kernel panic on skipped partition In the event of a skipped parti… |
CVE-2022-48773 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create If there are failures th… |
CVE-2024-40984 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." Undo the… |
CVE-2024-40973 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: media: mtk-vcodec: potential null pointer deference in SCP The return value of devm_kzall… |
CVE-2024-40964 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: Possible null pointer dereference in cs35l41_hda_unbind() The cs35l41… |
CVE-2024-40962 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: allocate dummy checksums for zoned NODATASUM writes Shin'ichiro reported th… |
CVE-2024-40961 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible NULL deref in fib6_nh_init() syzbot reminds us that in6_dev_get()… |
CVE-2024-40960 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible NULL dereference in rt6_probe() syzbot caught a NULL dereference i… |
CVE-2024-40959 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() ip6_dst_idev() can return N… |
CVE-2024-40957 | High | 7.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors input… |
CVE-2024-40952 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix NULL pointer dereference in ocfs2_journal_dirty() bdev->bd_super has been remo… |
CVE-2024-40951 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix NULL pointer dereference in ocfs2_abort_trigger() bdev->bd_super has been remo… |
CVE-2024-40947 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ima: Avoid blocking in RCU read-side critical section A panic happens in ima_match_policy… |
CVE-2024-40945 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: iommu: Return right value in iommu_sva_bind_device() iommu_sva_bind_device() should retur… |
CVE-2024-40928 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() Clang static che… |
CVE-2024-40919 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() I… |
CVE-2024-40911 | High | 8.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Lock wiphy in cfg80211_get_station Wiphy should be locked before calling… |
CVE-2024-40905 | Medium | 4.7 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible race in __fib6_drop_pcpu_from() syzbot found a race in __fib6_drop_pcp… |
CVE-2024-39506 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet In lio_vf_rep_cop… |
CVE-2024-39505 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: drm/komeda: check for error-valued pointer komeda_pipeline_get_state() may return an erro… |
CVE-2024-39504 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: validate mandatory meta and payload Check for mandatory netlink att… |
CVE-2024-39498 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: drm/mst: Fix NULL pointer dereference at drm_dp_add_payload_part2 [Why] Commit: - commit… |
CVE-2024-38536 | High | 7.5 | 2024-07-11 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. A memory allocation failure due to `http… |
CVE-2024-28068 | Medium | 5.3 | 2024-07-09 | A vulnerability was discovered in SS in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, Exynos 990… |
CVE-2024-38072 | High | 7.5 | 2024-07-09 | Windows Remote Desktop Licensing Service Denial of Service Vulnerability |
CVE-2024-37996 | Low | 3.3 | 2024-07-09 | A vulnerability has been identified in JT Open (All versions < V11.5), JT2Go (All versions < V2406.0003), PLM XML SDK (All versions < V7.1.0.014), Teamcenter V… |
CVE-2024-39473 | Medium | 5.5 | 2024-07-05 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Fix input format query of process modules without base extension… |
CVE-2024-3332 | Medium | 6.5 | 2024-07-03 | A malicious BLE device can send a specific order of packet sequence to cause a DoS attack on the victim BLE device |
CVE-2024-38477 | High | 7.5 | 2024-07-01 | null pointer dereference in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows an attacker to crash the server via a malicious request. Users are recomm… |
CVE-2024-36387 | Medium | 5.4 | 2024-07-01 | Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading pe… |
CVE-2024-36982 | High | 7.5 | 2024-07-01 | In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109 and 9.1.2308.207, an attacker could trigger… |
CVE-2024-39132 | Medium | 6.5 | 2024-06-27 | A NULL Pointer Dereference vulnerability in DumpTS v0.1.0-nightly allows attackers to cause a denial of service via the function VerifyCommandLine() at /src/Du… |
CVE-2024-39130 | High | 7.5 | 2024-06-27 | A NULL Pointer Dereference discovered in DumpTS v0.1.0-nightly allows attackers to cause a denial of service via the function DumpOneStream() at /src/DumpStrea… |
CVE-2024-37820 | Medium | 5.4 | 2024-06-25 | A nil pointer dereference in PingCAP TiDB v8.2.0-alpha-216-gfe5858b allows attackers to crash the application via expression.inferCollation. |
CVE-2024-39470 | Medium | 5.5 | 2024-06-25 | In the Linux kernel, the following vulnerability has been resolved: eventfs: Fix a possible null pointer dereference in eventfs_find_events() In function eve… |