CWE-476 · NULL Pointer Dereference (page 31)
Page 31 of 56 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-26661 | Medium | 5.5 | 2024-04-02 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()' In "u32 otg_i… |
CVE-2024-26657 | Medium | 5.5 | 2024-04-02 | In the Linux kernel, the following vulnerability has been resolved: drm/sched: fix null-ptr-deref in init entity The bug can be triggered by sending an amdgp… |
CVE-2023-52631 | Medium | 5.5 | 2024-04-02 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix an NULL dereference bug The issue here is when this is called from ntfs_loa… |
CVE-2024-29489 | Medium | 5.5 | 2024-03-28 | Jerryscript 2.4.0 has SEGV at ./jerry-core/ecma/base/ecma-helpers.c:238:58 in ecma_get_object_type. |
CVE-2024-0079 | Medium | 6.5 | 2024-03-27 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user in a guest VM can cause a NULL-pointer derefere… |
CVE-2024-0078 | Medium | 6.5 | 2024-03-27 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user in a guest can cause a NULL-pointer dereference… |
CVE-2024-0075 | Medium | 6.1 | 2024-03-27 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user may cause a NULL-pointer dereference by accessing passed parameters the v… |
CVE-2024-20312 | High | 7.4 | 2024-03-27 | A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticat… |
CVE-2023-46051 | Low | 3.3 | 2024-03-27 | TeX Live 944e257 allows a NULL pointer dereference in texk/web2c/pdftexdir/tounicode.c. NOTE: this is disputed because it should be categorized as a usability… |
CVE-2023-46049 | Medium | 5.3 | 2024-03-27 | LLVM 15.0.0 has a NULL pointer dereference in the parseOneMetadata() function via a crafted pdflatex.fmt file (or perhaps a crafted .o file) to llvm-lto. NOTE… |
CVE-2023-46048 | Medium | 6.2 | 2024-03-27 | Tex Live 944e257 has a NULL pointer dereference in texk/web2c/pdftexdir/writet1.c. NOTE: this is disputed because it should be categorized as a usability probl… |
CVE-2023-46046 | Medium | 5.5 | 2024-03-27 | An issue in MiniZinc before 2.8.0 allows a NULL pointer dereference via ti_expr in a crafted .mzn file. NOTE: this is disputed because there is no common libmi… |
CVE-2023-45935 | Medium | 4.2 | 2024-03-27 | Qt 6 through 6.6 was discovered to contain a NULL pointer dereference via the function QXcbConnection::initializeAllAtoms(). NOTE: this is disputed because it… |
CVE-2023-45925 | | 2024-03-27 | GNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference via the function x_error_handler() at tty/x11conn.c. NOTE: th… | |
CVE-2023-45924 | Critical | 9.8 | 2024-03-27 | libglxproto.c in OpenGL libglvnd bb06db5a was discovered to contain a segmentation violation via the function glXGetDrawableScreen(). NOTE: this is disputed be… |
CVE-2023-45920 | Medium | 4.2 | 2024-03-27 | Xfig v3.2.8 was discovered to contain a NULL pointer dereference when calling XGetWMHints(). NOTE: this is disputed because it is not expected that an X applic… |
CVE-2023-45931 | High | 7.5 | 2024-03-27 | Mesa 23.0.4 was discovered to contain a NULL pointer dereference in check_xshm() for the has_error state. NOTE: this is disputed because there is no scenario i… |
CVE-2023-45913 | Medium | 6.2 | 2024-03-27 | Mesa v23.0.4 was discovered to contain a NULL pointer dereference via the function dri2GetGlxDrawableFromXDrawableId(). This vulnerability is triggered when th… |
CVE-2024-26649 | Medium | 5.5 | 2024-03-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix the null pointer when load rlc firmware If the RLC firmware is invalid be… |
CVE-2024-26648 | Medium | 5.5 | 2024-03-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix variable deferencing before NULL check in edp_setup_replay() In edp_… |
CVE-2024-26647 | Medium | 5.5 | 2024-03-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix late derefrence 'dsc' check in 'link_set_dsc_pps_packet()' In link_s… |
CVE-2023-52627 | Medium | 5.5 | 2024-03-26 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7091r: Allow users to configure device events AD7091R-5 devices are supported… |
CVE-2024-23722 | High | 7.5 | 2024-03-26 | In Fluent Bit 2.1.8 through 2.2.1, a NULL pointer dereference can be caused via an invalid HTTP payload with the content type of x-www-form-urlencoded. It cras… |
CVE-2021-47179 | High | 7.5 | 2024-03-25 | In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return() Commit de144ff… |
CVE-2021-47169 | Medium | 5.5 | 2024-03-25 | In the Linux kernel, the following vulnerability has been resolved: serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait' In 'rp2_probe'… |
CVE-2021-47165 | Medium | 5.5 | 2024-03-25 | In the Linux kernel, the following vulnerability has been resolved: drm/meson: fix shutdown crash when component not probed When main component is not probed… |
CVE-2021-47164 | Medium | 5.5 | 2024-03-25 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix null deref accessing lag dev It could be the lag dev is null so stop proce… |
CVE-2021-47149 | Medium | 5.5 | 2024-03-25 | In the Linux kernel, the following vulnerability has been resolved: net: fujitsu: fix potential null-ptr-deref In fmvj18x_get_hwinfo(), if ioremap fails ther… |
CVE-2021-47141 | Medium | 5.5 | 2024-03-25 | In the Linux kernel, the following vulnerability has been resolved: gve: Add NULL pointer checks when freeing irqs. When freeing notification blocks, we inde… |
CVE-2021-47140 | Medium | 5.3 | 2024-03-25 | In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Clear DMA ops when switching domain Since commit 08a27c1c3ecf ("iommu: Add sup… |
CVE-2024-28286 | High | 7.5 | 2024-03-21 | In mz-automation libiec61850 v1.4.0, a NULL Pointer Dereference was detected in the mmsServer_handleFileCloseRequest.c function of src/mms/iso_mms/server/mms_f… |
CVE-2024-28584 | Low | 3.3 | 2024-03-20 | Null Pointer Dereference vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the J2KImageToF… |
CVE-2024-28577 | Medium | 5.5 | 2024-03-20 | Null Pointer Dereference vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the jpeg_read_e… |
CVE-2024-2496 | Medium | 5.0 | 2024-03-18 | A NULL pointer dereference flaw was found in the udevConnectListAllInterfaces() function in libvirt. This issue can occur when detaching a host interface while… |
CVE-2024-26632 | High | 7.8 | 2024-03-18 | In the Linux kernel, the following vulnerability has been resolved: block: Fix iterating over an empty bio with bio_for_each_folio_all If the bio contains no… |
CVE-2023-52613 | Medium | 5.5 | 2024-03-18 | In the Linux kernel, the following vulnerability has been resolved: drivers/thermal/loongson2_thermal: Fix incorrect PTR_ERR() judgment PTR_ERR() returns -EN… |
CVE-2021-47134 | Medium | 5.5 | 2024-03-15 | In the Linux kernel, the following vulnerability has been resolved: efi/fdt: fix panic when no valid fdt found setup_arch() would invoke efi_init()->efi_get_… |
CVE-2021-47127 | Medium | 5.5 | 2024-03-15 | In the Linux kernel, the following vulnerability has been resolved: ice: track AF_XDP ZC enabled queues in bitmap Commit c7a219048e45 ("ice: Remove xsk_buff_… |
CVE-2021-47120 | Medium | 5.5 | 2024-03-15 | In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: fix NULL-deref on disconnect Commit 9d7b18668956 ("HID: magicmouse: add… |
CVE-2024-2204 | Medium | 5.5 | 2024-03-15 | Zemana AntiLogger v2.74.204.664 is vulnerable to a Denial of Service (DoS) vulnerability by triggering the 0x80002004 and 0x80002010 IOCTL codes of the zam64.s… |
CVE-2024-26475 | Medium | 5.5 | 2024-03-14 | An issue in radareorg radare2 v.0.9.7 through v.5.8.6 and fixed in v.5.8.8 allows a local attacker to cause a denial of service via the grub_sfs_read_extent fu… |
CVE-2024-20266 | Medium | 5.3 | 2024-03-13 | A vulnerability in the DHCP version 4 (DHCPv4) server feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to trigger a crash of th… |
CVE-2023-43279 | Medium | 6.5 | 2024-03-12 | Null Pointer Dereference in mask_cidr6 component at cidr.c in Tcpreplay 4.4.4 allows attackers to crash the application via crafted tcprewrite command. |
CVE-2024-27229 | High | 7.5 | 2024-03-11 | In ss_SendCallBarringPwdRequiredIndMsg of ss_CallBarring.c, there is a possible null pointer deref due to a missing null check. This could lead to remote denia… |
CVE-2024-26615 | Medium | 5.5 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix illegal rmb_desc access in SMC-D connection dump A crash was found when dump… |
CVE-2024-26612 | Medium | 5.5 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: netfs, fscache: Prevent Oops in fscache_put_cache() This function dereferences "cache" an… |
CVE-2024-26611 | High | 7.5 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: xsk: fix usage of multi-buffer BPF helpers for ZC XDP Currently when packet is shrunk via… |
CVE-2023-52492 | Medium | 4.4 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: fix NULL pointer in channel unregistration function __dma_async_device_channel… |
CVE-2023-52490 | Medium | 5.5 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: mm: migrate: fix getting incorrect page mapping during page migration When running stress… |
CVE-2023-52487 | Medium | 5.5 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix peer flow lists handling The cited change refactored mlx5e_tc_del_fdb_peer… |
CVE-2023-46427 | Critical | 9.8 | 2024-03-09 | An issue was discovered in gpac version 2.3-DEV-rev588-g7edc40fee-master, allows remote attackers to execute arbitrary code, cause a denial of service (DoS), a… |
CVE-2024-1443 | Medium | 4.4 | 2024-03-07 | MSI Afterburner v4.6.5.16370 is vulnerable to a Denial of Service vulnerability by triggering the 0x80002000 IOCTL code of the RTCore64.sys driver. The handle… |
CVE-2024-26626 | High | 7.5 | 2024-03-06 | In the Linux kernel, the following vulnerability has been resolved: ipmr: fix kernel panic when forwarding mcast packets The stacktrace was: [ 86.305548] B… |
CVE-2024-26623 | High | 7.8 | 2024-03-06 | In the Linux kernel, the following vulnerability has been resolved: pds_core: Prevent race issues involving the adminq There are multiple paths that can resu… |
CVE-2023-52607 | Medium | 5.5 | 2024-03-06 | In the Linux kernel, the following vulnerability has been resolved: powerpc/mm: Fix null-pointer dereference in pgtable_cache_add kasprintf() returns a point… |
CVE-2023-52593 | Medium | 5.5 | 2024-03-06 | In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap() Since 'ieee80211_bea… |
CVE-2023-52585 | Medium | 5.5 | 2024-03-06 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper() Retur… |
CVE-2024-24783 | Medium | 5.9 | 2024-03-05 | Verifying a certificate chain which contains a certificate with an unknown public key algorithm will cause Certificate.Verify to panic. This affects all crypto… |
CVE-2021-47108 | Medium | 5.5 | 2024-03-04 | In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: hdmi: Perform NULL pointer check for mtk_hdmi_conf In commit 41ca9caaae0b (… |
CVE-2021-47095 | Medium | 5.5 | 2024-03-04 | In the Linux kernel, the following vulnerability has been resolved: ipmi: ssif: initialize ssif_info->client early During probe ssif_info->client is derefere… |
CVE-2023-43541 | High | 8.4 | 2024-03-04 | Memory corruption while invoking the SubmitCommands call on Gfx engine during the graphics render. |
CVE-2023-52574 | High | 7.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: team: fix null-ptr-deref when team device type is changed Get a null-ptr-deref bug as fol… |
CVE-2023-52573 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: net: rds: Fix possible NULL-pointer dereference In rds_rdma_cm_event_handler_cmn() check… |
CVE-2023-52570 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: vfio/mdev: Fix a null-ptr-deref bug for mdev_unregister_parent() Inject fault while probi… |
CVE-2023-52568 | Medium | 4.7 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race The SGX EPC reclaimer (ksgxd)… |
CVE-2023-52567 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: serial: 8250_port: Check IRQ data before use In case the leaf driver wants to use IRQ pol… |
CVE-2023-52564 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: Revert "tty: n_gsm: fix UAF in gsm_cleanup_mux" This reverts commit 9b9c8195f3f0d74a82607… |
CVE-2023-52523 | High | 7.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Reject sk_msg egress redirects to non-TCP sockets With a SOCKMAP/SOCKHASH m… |
CVE-2023-52513 | High | 7.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix connection failure handling In case immediate MPA request processing fails… |
CVE-2023-52508 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() The nvme_fc_fcp_op stru… |
CVE-2023-52506 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Set all reserved memblocks on Node#0 at initialization After commit 61167ad5fe… |
CVE-2021-47079 | Medium | 5.5 | 2024-03-01 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: ideapad-laptop: fix a NULL pointer dereference The third parameter of dytc_… |
CVE-2021-47077 | Medium | 5.5 | 2024-03-01 | In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Add pointer checks in qedf_update_link_speed() The following trace was observ… |
CVE-2021-47062 | Medium | 5.5 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Use online_vcpus, not created_vcpus, to iterate over vCPUs Use the kvm_for_each… |
CVE-2024-27660 | Medium | 6.5 | 2024-02-29 | D-Link DIR-823G A1V1.0.2B05 was discovered to contain a Null-pointer dereferences in sub_41C488(). This vulnerability allows attackers to cause a Denial of Ser… |
CVE-2024-26607 | Medium | 4.7 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: drm/bridge: sii902x: Fix probing race issue A null pointer dereference crash has been obs… |
CVE-2023-52477 | Medium | 5.5 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: usb: hub: Guard against accesses to uninitialized BOS descriptors Many functions in drive… |
CVE-2023-6247 | Medium | 6.5 | 2024-02-29 | The PKCS#7 parser in OpenVPN 3 Core Library versions through 3.8.3 did not properly validate the parsed data, which would result in the application crashing. |
CVE-2023-44347 | Medium | 5.5 | 2024-02-29 | Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker c… |
CVE-2023-44341 | Medium | 5.5 | 2024-02-29 | Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker c… |
CVE-2024-26342 | High | 7.5 | 2024-02-28 | A Null pointer dereference in usr/sbin/httpd in ASUS AC68U 3.0.0.4.384.82230 allows remote attackers to trigger DoS via network packet. |
CVE-2021-47050 | Medium | 5.5 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: memory: renesas-rpc-if: fix possible NULL pointer dereference of resource The platform_ge… |
CVE-2021-47045 | Medium | 5.5 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix null pointer dereference in lpfc_prep_els_iocb() It is possible to call l… |
CVE-2021-47008 | Medium | 5.5 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Make sure GHCB is mapped before updating Access to the GHCB is mainly in the VM… |
CVE-2021-47005 | Medium | 5.5 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix NULL pointer dereference for ->get_features() get_features ops of pci_… |
CVE-2021-47003 | Medium | 5.5 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix potential null dereference on pointer status There are calls to idxd… |
CVE-2021-47002 | Medium | 5.5 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix null pointer dereference in svc_rqst_free() When alloc_pages_node() returns n… |
CVE-2021-46995 | Medium | 5.5 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: can: mcp251xfd: mcp251xfd_probe(): fix an error pointer dereference in probe When we conv… |
CVE-2021-46994 | Medium | 5.5 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: can: mcp251x: fix resume from sleep before interface was brought up Since 8ce8c0abcba3 th… |
CVE-2021-46983 | High | 7.5 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: Fix NULL deref when SEND is completed with error When running some traffic an… |
CVE-2021-46981 | Medium | 5.5 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: nbd: Fix NULL pointer in flush_workqueue Open /dev/nbdX first, the config_refs will be 1… |
CVE-2021-46964 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Reserve extra IRQ vectors Commit a6dcfe08487e ("scsi: qla2xxx: Limit inter… |
CVE-2021-46949 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: sfc: farch: fix TX queue lookup in TX flush done handling We're starting from a TXQ insta… |
CVE-2021-46948 | High | 7.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: sfc: farch: fix TX queue lookup in TX event handling We're starting from a TXQ label, not… |
CVE-2021-46947 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: sfc: adjust efx->xdp_tx_queue_count with the real number of initialized queues efx->xdp_t… |
CVE-2021-46933 | High | 7.8 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. ffs_data_clear is indirectly call… |
CVE-2021-46916 | Medium | 5.5 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: ixgbe: Fix NULL pointer dereference in ethtool loopback test The ixgbe driver currently g… |
CVE-2021-46912 | High | 7.3 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: net: Make tcp_allowed_congestion_control readonly in non-init netns Currently, tcp_allowe… |
CVE-2024-25768 | High | 7.5 | 2024-02-26 | OpenDMARC 1.4.2 contains a null pointer dereference vulnerability in /OpenDMARC/libopendmarc/opendmarc_policy.c. |
CVE-2024-26604 | Medium | 5.5 | 2024-02-26 | In the Linux kernel, the following vulnerability has been resolved: Revert "kobject: Remove redundant checks for whether ktype is NULL" This reverts commit 1… |