CWE-476 · NULL Pointer Dereference (page 32)
Page 32 of 56 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-26600 | Medium | 5.5 | 2024-02-26 | In the Linux kernel, the following vulnerability has been resolved: phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP If the external phy working… |
CVE-2023-52473 | Medium | 5.5 | 2024-02-26 | In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix NULL pointer dereference in zone registration error path If device_reg… |
CVE-2023-52472 | Medium | 5.5 | 2024-02-26 | In the Linux kernel, the following vulnerability has been resolved: crypto: rsa - add a check for allocation failure Static checkers insist that the mpi_allo… |
CVE-2023-52471 | Medium | 5.5 | 2024-02-26 | In the Linux kernel, the following vulnerability has been resolved: ice: Fix some null pointer dereference issues in ice_ptp.c devm_kasprintf() returns a poi… |
CVE-2023-52470 | Medium | 5.5 | 2024-02-26 | In the Linux kernel, the following vulnerability has been resolved: drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() check the alloc_… |
CVE-2023-52467 | Medium | 5.5 | 2024-02-26 | In the Linux kernel, the following vulnerability has been resolved: mfd: syscon: Fix null pointer dereference in of_syscon_register() kasprintf() returns a p… |
CVE-2023-52465 | Medium | 5.5 | 2024-02-26 | In the Linux kernel, the following vulnerability has been resolved: power: supply: Fix null pointer dereference in smb2_probe devm_kasprintf and devm_kzalloc… |
CVE-2021-46905 | Medium | 5.5 | 2024-02-26 | In the Linux kernel, the following vulnerability has been resolved: net: hso: fix NULL-deref on disconnect regression Commit 8a12f8836145 ("net: hso: fix nul… |
CVE-2021-46904 | Medium | 5.5 | 2024-02-26 | In the Linux kernel, the following vulnerability has been resolved: net: hso: fix null-ptr-deref during tty device unregistration Multiple ttys try to claim… |
CVE-2023-51394 | Medium | 5.3 | 2024-02-23 | High traffic environments may result in NULL Pointer Dereference vulnerability in Silicon Labs's Ember ZNet SDK before v7.4.0, causing a system crash. |
CVE-2024-26595 | Medium | 5.5 | 2024-02-23 | In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path When calling mlxsw_s… |
CVE-2023-52463 | Medium | 5.5 | 2024-02-23 | In the Linux kernel, the following vulnerability has been resolved: efivarfs: force RO when remounting if SetVariable is not supported If SetVariable at runt… |
CVE-2023-52462 | Medium | 5.5 | 2024-02-23 | In the Linux kernel, the following vulnerability has been resolved: bpf: fix check for attempt to corrupt spilled pointer When register is spilled onto a sta… |
CVE-2023-52460 | Medium | 5.5 | 2024-02-23 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL pointer dereference at hibernate During hibernate sequence the… |
CVE-2023-52459 | Medium | 5.5 | 2024-02-23 | In the Linux kernel, the following vulnerability has been resolved: media: v4l: async: Fix duplicated list deletion The list deletion call dropped here is al… |
CVE-2023-52458 | Medium | 5.5 | 2024-02-23 | In the Linux kernel, the following vulnerability has been resolved: block: add check that partition length needs to be aligned with block size Before calling… |
CVE-2023-52454 | High | 7.5 | 2024-02-23 | In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length If the host sends… |
CVE-2024-26591 | Medium | 5.5 | 2024-02-22 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix re-attachment branch in bpf_tracing_prog_attach The following case can cause a c… |
CVE-2024-26590 | Medium | 5.5 | 2024-02-22 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix inconsistent per-file compression format EROFS can select compression algorith… |
CVE-2024-26587 | Medium | 5.5 | 2024-02-22 | In the Linux kernel, the following vulnerability has been resolved: net: netdevsim: don't try to destroy PHC on VFs PHC gets initialized in nsim_init_netdevs… |
CVE-2023-52450 | Medium | 5.5 | 2024-02-22 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology() Get logi… |
CVE-2023-52449 | Medium | 5.5 | 2024-02-22 | In the Linux kernel, the following vulnerability has been resolved: mtd: Fix gluebi NULL pointer dereference caused by ftl notifier If both ftl.ko and gluebi… |
CVE-2023-52448 | Medium | 5.5 | 2024-02-22 | In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump Syzkaller has reported a NULL… |
CVE-2023-52443 | Medium | 5.5 | 2024-02-22 | In the Linux kernel, the following vulnerability has been resolved: apparmor: avoid crash when parsed profile name is empty When processing a packed profile… |
CVE-2023-29180 | High | 7.5 | 2024-02-22 | A null pointer dereference in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, 6.2.0 through 6.2.14, 6.0.0 through 6.0… |
CVE-2023-29179 | Medium | 6.5 | 2024-02-22 | A null pointer dereference in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, Fortiproxy version 7.2.0 through 7.2.4… |
CVE-2024-26130 | High | 7.5 | 2024-02-21 | cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Starting in version 38.0.0 and prior to version 42.0.4… |
CVE-2024-25260 | Medium | 4.0 | 2024-02-20 | elfutils v0.189 was discovered to contain a NULL pointer dereference via the handle_verdef() function at readelf.c. |
CVE-2024-25197 | Medium | 6.5 | 2024-02-20 | Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a NULL pointer dereference via the isCurrent() function at… |
CVE-2023-6397 | Medium | 6.5 | 2024-02-20 | A null pointer dereference vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1 and USG FLEX series firmware versions… |
CVE-2023-52371 | Low | 3.5 | 2024-02-18 | Vulnerability of null references in the motor module.Successful exploitation of this vulnerability may affect availability. |
CVE-2024-0035 | High | 7.8 | 2024-02-16 | In onNullBinding of TileLifecycleManager.java, there is a possible way to launch an activity from the background due to a missing null check. This could lead t… |
CVE-2024-24989 | High | 7.5 | 2024-02-14 | When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate. Note: The HTTP/… |
CVE-2024-24775 | High | 7.5 | 2024-02-14 | When a virtual server is enabled with VLAN group and SNAT listener is configured, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to ter… |
CVE-2024-23308 | High | 7.5 | 2024-02-14 | When a BIG-IP Advanced WAF or BIG-IP ASM policy with a Request Body Handling option is attached to a virtual server, undisclosed requests can cause the BD pro… |
CVE-2024-21763 | High | 7.5 | 2024-02-14 | When BIG-IP AFM Device DoS or DoS profile is configured with NXDOMAIN attack vector and bad actor detection, undisclosed queries can cause the Traffic Managem… |
CVE-2024-21404 | High | 7.5 | 2024-02-13 | .NET Denial of Service Vulnerability |
CVE-2024-21356 | Medium | 6.5 | 2024-02-13 | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability |
CVE-2024-1096 | Medium | 5.5 | 2024-02-13 | Twister Antivirus v8.17 is vulnerable to a Denial of Service vulnerability by triggering the 0x80112067, 0x801120CB 0x801120CC 0x80112044, 0x8011204B, 0x801120… |
CVE-2024-23801 | Low | 3.3 | 2024-02-13 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2302 (All versions < V2302.0007). The aff… |
CVE-2024-23800 | Low | 3.3 | 2024-02-13 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2302 (All versions < V2302.0007). The aff… |
CVE-2024-23799 | Low | 3.3 | 2024-02-13 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions), Tecnomatix Plant Simulation V2302 (All versions < V2302.0007). The aff… |
CVE-2024-22043 | Low | 3.3 | 2024-02-13 | A vulnerability has been identified in Parasolid V35.0 (All versions < V35.0.251), Parasolid V35.1 (All versions < V35.1.170). The affected applications contai… |
CVE-2023-48364 | Medium | 6.5 | 2024-02-13 | A vulnerability has been identified in OpenPCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All versions < V9.1 SP2 UC05), SIMATIC PCS 7 V9.1 (Al… |
CVE-2023-48363 | Medium | 6.5 | 2024-02-13 | A vulnerability has been identified in OpenPCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All versions < V9.1 SP2 UC05), SIMATIC PCS 7 V9.1 (Al… |
CVE-2024-23327 | High | 7.5 | 2024-02-09 | Envoy is a high-performance edge/middle/service proxy. When PPv2 is enabled both on a listener and subsequent cluster, the Envoy instance will segfault when at… |
CVE-2024-25454 | Medium | 5.5 | 2024-02-09 | Bento4 v1.6.0-640 was discovered to contain a NULL pointer dereference via the AP4_DescriptorFinder::Test() function. |
CVE-2024-25453 | Medium | 5.5 | 2024-02-09 | Bento4 v1.6.0-640 was discovered to contain a NULL pointer dereference via the AP4_StszAtom::GetSampleSize() function. |
CVE-2023-6536 | Medium | 6.5 | 2024-02-07 | A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NV… |
CVE-2023-6535 | Medium | 6.5 | 2024-02-07 | A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NV… |
CVE-2023-6356 | Medium | 6.5 | 2024-02-07 | A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NV… |
CVE-2023-43522 | High | 7.5 | 2024-02-06 | Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL. |
CVE-2024-24864 | Medium | 5.3 | 2024-02-05 | A race condition was found in the Linux kernel's media/dvb-core in dvbdmx_write() function. This can result in a null pointer dereference issue, possibly leadi… |
CVE-2024-24860 | Medium | 4.6 | 2024-02-05 | A race condition was found in the Linux kernel's bluetooth device driver in {min,max}_key_size_set() function. This can result in a null pointer dereference is… |
CVE-2024-24855 | Medium | 5.0 | 2024-02-05 | A race condition was found in the Linux kernel's scsi device driver in lpfc_unregister_fcf_rescan() function. This can result in a null pointer dereference iss… |
CVE-2024-23196 | Medium | 5.3 | 2024-02-05 | A race condition was found in the Linux kernel's sound/hda device driver in snd_hdac_regmap_sync() function. This can result in a null pointer dereference iss… |
CVE-2024-22386 | Medium | 5.3 | 2024-02-05 | A race condition was found in the Linux kernel's drm/exynos device driver in exynos_drm_crtc_atomic_disable() function. This can result in a null pointer deref… |
CVE-2023-41274 | Medium | 5.5 | 2024-02-02 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authen… |
CVE-2023-40546 | Medium | 6.2 | 2024-01-29 | A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message… |
CVE-2024-23441 | Medium | 5.5 | 2024-01-29 | Vba32 Antivirus v3.36.0 is vulnerable to a Denial of Service vulnerability by triggering the 0x2220A7 IOCTL code of the Vba32m64.sys driver. |
CVE-2023-46838 | High | 7.5 | 2024-01-29 | Transmit requests in Xen's virtual network protocol can consist of multiple parts. While not really useful, except for the initial part any of them may be of… |
CVE-2024-0841 | Medium | 6.6 | 2024-01-28 | A null pointer dereference flaw was found in the hugetlbfs_fill_super function in the Linux kernel hugetlbfs (HugeTLB pages) functionality. This issue may allo… |
CVE-2024-0727 | Medium | 5.5 | 2024-01-26 | Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact summary: Applic… |
CVE-2024-22099 | Medium | 6.3 | 2024-01-25 | NULL Pointer Dereference vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (net, bluetooth modules) allows Overflow Buffers. This vulnerability is… |
CVE-2023-46343 | Medium | 5.5 | 2024-01-23 | In the Linux kernel before 6.5.9, there is a NULL pointer dereference in send_acknowledge in net/nfc/nci/spi.c. |
CVE-2024-0430 | Medium | 5.5 | 2024-01-22 | IObit Malware Fighter v11.0.0.1274 is vulnerable to a Denial of Service vulnerability by triggering the 0x8001E00C IOCTL code of the ImfHpRegFilter.sys driver. |
CVE-2021-33630 | Medium | 5.5 | 2024-01-18 | NULL Pointer Dereference vulnerability in openEuler kernel on Linux (network modules) allows Pointer Manipulation. This vulnerability is associated with progra… |
CVE-2023-6915 | Medium | 6.2 | 2024-01-15 | A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denia… |
CVE-2023-6683 | Medium | 6.5 | 2024-01-12 | A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. The qemu_clipboard_request() function can be reached before vnc_serve… |
CVE-2024-21602 | High | 7.5 | 2024-01-12 | A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS Evolved on ACX7024, ACX7100-32C and ACX7100-48L allows an unauthenticated, network-based… |
CVE-2024-21664 | Medium | 4.3 | 2024-01-09 | jwx is a Go module implementing various JWx (JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE) technologies. Calling `jws.Parse` with a JSON serialized payload whe… |
CVE-2024-20661 | High | 7.5 | 2024-01-09 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-51744 | Low | 3.3 | 2024-01-09 | A vulnerability has been identified in JT2Go (All versions < V14.3.0.6), Teamcenter Visualization V13.3 (All versions < V13.3.0.13), Teamcenter Visualization V… |
CVE-2023-34323 | Medium | 5.5 | 2024-01-05 | When a transaction is committed, C Xenstored will first check the quota is correct before attempting to commit any nodes. It would be possible that accounting… |
CVE-2023-52312 | Medium | 4.7 | 2024-01-03 | Nullptr dereference in paddle.crop in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. |
CVE-2023-52303 | Medium | 4.7 | 2024-01-03 | Nullptr in paddle.put_along_axis in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. |
CVE-2023-52302 | Medium | 4.7 | 2024-01-03 | Nullptr in paddle.nextafter in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. |
CVE-2023-38676 | Medium | 4.7 | 2024-01-03 | Nullptr in paddle.dot in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. |
CVE-2024-0209 | High | 7.8 | 2024-01-03 | IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file |
CVE-2023-33109 | High | 7.5 | 2024-01-02 | Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host. |
CVE-2023-33036 | High | 7.1 | 2024-01-02 | Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call. |
CVE-2023-38321 | High | 7.5 | 2023-12-25 | OpenNDS, as used in Sierra Wireless ALEOS before 4.17.0.12 and other products, allows remote attackers to cause a denial of service (NULL pointer dereference… |
CVE-2023-37188 | High | 7.5 | 2023-12-25 | C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_rate_decompress at zfp/blosc2-zfp.c. |
CVE-2023-37187 | High | 7.5 | 2023-12-25 | C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the zfp/blosc2-zfp.c zfp_acc_decompress. function. |
CVE-2023-37186 | High | 7.5 | 2023-12-25 | C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference in ndlz/ndlz8x8.c via a NULL pointer to memset. |
CVE-2023-37185 | High | 7.5 | 2023-12-25 | C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_prec_decompress at zfp/blosc2-zfp.c. |
CVE-2023-7042 | Medium | 4.4 | 2023-12-21 | A null pointer dereference vulnerability was found in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() in drivers/net/wireless/ath/ath10k/wmi-tlv.c in the Linux kerne… |
CVE-2023-50472 | High | 7.5 | 2023-12-14 | cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_SetValuestring at cJSON.c. |
CVE-2023-50471 | High | 7.5 | 2023-12-14 | cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_InsertItemInArray at cJSON.c. |
CVE-2023-49936 | High | 7.5 | 2023-12-14 | An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. A NULL pointer dereference leads to denial of service. The fixed versions are 22.05.11… |
CVE-2023-47076 | Medium | 5.5 | 2023-12-13 | Adobe InDesign versions 19.0 (and earlier) and 17.4.2 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker could… |
CVE-2023-6679 | Medium | 5.5 | 2023-12-11 | A null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c in the Digital Phase Locked Loop (DPLL) subsyste… |
CVE-2023-6622 | Medium | 5.5 | 2023-12-08 | A null pointer dereference vulnerability was found in nft_dynset_init() in net/netfilter/nft_dynset.c in nf_tables in the Linux kernel. This issue may allow a… |
CVE-2023-48416 | High | 7.5 | 2023-12-08 | In multiple locations, there is a possible null dereference due to a missing null check. This could lead to remote denial of service with no additional executi… |
CVE-2023-33089 | High | 7.5 | 2023-12-05 | Transient DOS when processing a NULL buffer while parsing WLAN vdev. |
CVE-2023-33088 | High | 8.4 | 2023-12-05 | Memory corruption when processing cmd parameters while parsing vdev. |
CVE-2023-48697 | Medium | 6.4 | 2023-12-05 | Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code… |
CVE-2023-40459 | High | 7.5 | 2023-12-04 | The ACEManager component of ALEOS 4.16 and earlier does not adequately perform input sanitization during authentication, which could potentially resul… |
CVE-2023-49083 | Medium | 5.9 | 2023-11-29 | cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling `load_pem_pkcs7_certificates` or `load_der_pkcs… |
CVE-2023-5972 | High | 7.0 | 2023-11-23 | A null pointer dereference flaw was found in the nft_inner.c functionality of netfilter in the Linux kernel. This issue could allow a local user to crash the s… |