CWE-476 · NULL Pointer Dereference (page 34)
Page 34 of 56 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-48443 | Medium | 5.5 | 2023-06-06 | In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. |
CVE-2022-48442 | Medium | 5.5 | 2023-06-06 | In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. |
CVE-2023-29539 | High | 8.8 | 2023-06-02 | When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character. This could… |
CVE-2023-33461 | Medium | 5.5 | 2023-06-01 | iniparser v4.1 is vulnerable to NULL Pointer Dereference in function iniparser_getlongint which misses check NULL for function iniparser_getstring's return. |
CVE-2023-3012 | High | 7.8 | 2023-05-31 | NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.2.2. |
CVE-2023-2953 | High | 7.5 | 2023-05-30 | A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function. |
CVE-2023-0779 | Medium | 6.7 | 2023-05-30 | At the most basic level, an invalid pointer can be input that crashes the device, but with more knowledge of the device’s memory layout, further exploitation i… |
CVE-2023-33973 | High | 7.5 | 2023-05-30 | RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames. In versions 2023.01 and… |
CVE-2023-24825 | High | 7.5 | 2023-05-30 | RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2023.0… |
CVE-2023-2898 | Medium | 4.7 | 2023-05-26 | There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileged user to cause a… |
CVE-2023-1667 | Medium | 6.5 | 2023-05-26 | A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of serv… |
CVE-2023-2875 | Medium | 5.5 | 2023-05-24 | A vulnerability, which was classified as problematic, was found in eScan Antivirus 22.0.1400.2443. Affected is the function 0x22E008u in the library PROCOBSRVE… |
CVE-2023-2872 | Medium | 5.5 | 2023-05-24 | A vulnerability classified as problematic has been found in FlexiHub 5.5.14691.0. This affects the function 0x220088 in the library fusbhub.sys of the componen… |
CVE-2023-2871 | Low | 3.3 | 2023-05-24 | A vulnerability was found in FabulaTech USB for Remote Desktop 6.1.0.0. It has been rated as problematic. Affected by this issue is the function 0x220448/0x220… |
CVE-2023-2840 | Critical | 9.8 | 2023-05-22 | NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.2.2. |
CVE-2023-24832 | High | 7.5 | 2023-05-18 | A null pointer dereference bug in Hermes prior to commit 5cae9f72975cf0e5a62b27fdd8b01f103e198708 could have been used by an attacker to crash an Hermes runtim… |
CVE-2023-2731 | Medium | 5.5 | 2023-05-17 | A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file. This flaw allows a local attacker to craft specific… |
CVE-2022-42878 | Low | 2.8 | 2023-05-10 | Null pointer dereference for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to… |
CVE-2022-29508 | Medium | 6.3 | 2023-05-10 | Null pointer dereference in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalation of privilege… |
CVE-2023-2617 | Medium | 5.3 | 2023-05-10 | A vulnerability classified as problematic was found in OpenCV wechat_qrcode Module up to 4.7.0. Affected by this vulnerability is the function DecodedBitStream… |
CVE-2023-2609 | Medium | 5.5 | 2023-05-09 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531. |
CVE-2023-24940 | High | 7.5 | 2023-05-09 | Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability |
CVE-2022-48241 | Medium | 5.5 | 2023-05-09 | In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. |
CVE-2022-48231 | Medium | 5.5 | 2023-05-09 | In soter service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. |
CVE-2023-31129 | High | 7.5 | 2023-05-08 | The Contiki-NG operating system versions 4.8 and prior can be triggered to dereference a NULL pointer in the message handling code for IPv6 router solicitiatio… |
CVE-2023-29996 | High | 7.5 | 2023-05-04 | In NanoMQ v0.15.0-0, segment fault with Null Pointer Dereference occurs in the process of decoding subinfo_decode and unsubinfo_decode. |
CVE-2022-33305 | High | 7.5 | 2023-05-02 | Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH. |
CVE-2022-33304 | High | 7.5 | 2023-05-02 | Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet. |
CVE-2023-0458 | Medium | 5.3 | 2023-04-26 | A speculative pointer dereference problem exists in the Linux Kernel on the do_prlimit() function. The resource argument value is controlled and is used in poi… |
CVE-2022-42335 | High | 7.8 | 2023-04-25 | x86 shadow paging arbitrary pointer dereference In environments where host assisted address translation is necessary but Hardware Assisted Paging (HAP) is unav… |
CVE-2023-28484 | Medium | 6.5 | 2023-04-24 | In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occurs in xmlSchemaFi… |
CVE-2023-24822 | High | 7.5 | 2023-04-24 | RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 20… |
CVE-2023-24818 | High | 7.5 | 2023-04-24 | RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 20… |
CVE-2023-31083 | Medium | 4.7 | 2023-04-24 | An issue was discovered in drivers/bluetooth/hci_ldisc.c in the Linux kernel 6.2. In hci_uart_tty_ioctl, there is a race condition between HCIUARTSETPROTO and… |
CVE-2023-31081 | Medium | 5.5 | 2023-04-24 | An issue was discovered in drivers/media/test-drivers/vidtv/vidtv_bridge.c in the Linux kernel 6.2. There is a NULL pointer dereference in vidtv_mux_stop_threa… |
CVE-2023-25510 | Low | 3.3 | 2023-04-22 | NVIDIA CUDA Toolkit SDK for Linux and Windows contains a NULL pointer dereference in cuobjdump, where a local user running the tool against a malformed binary… |
CVE-2023-0190 | Medium | 5.5 | 2023-04-22 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a NULL pointer dereference may lead to denial of service. |
CVE-2023-2177 | Medium | 5.5 | 2023-04-20 | A null pointer dereference issue was found in the sctp network protocol in net/sctp/stream_sched.c in Linux Kernel. If stream_in allocation is failed, stream_o… |
CVE-2023-2166 | Medium | 5.5 | 2023-04-19 | A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux. ml_priv may not be initialized in the receive path of… |
CVE-2023-28328 | Medium | 5.5 | 2023-04-19 | A NULL pointer dereference flaw was found in the az6027 driver in drivers/media/usb/dev-usb/az6027.c in the Linux Kernel. The message from user space is not ch… |
CVE-2023-28327 | Medium | 5.5 | 2023-04-19 | A NULL pointer dereference flaw was found in the UNIX protocol in net/unix/diag.c In unix_diag_get_exact in the Linux Kernel. The newly allocated skb does not… |
CVE-2023-1382 | Medium | 4.7 | 2023-04-19 | A data race flaw was found in the Linux kernel, between where con is allocated and con->sock is set. This issue leads to a NULL pointer dereference when access… |
CVE-2023-1587 | Medium | 5.8 | 2023-04-19 | Avast and AVG Antivirus for Windows were susceptible to a NULL pointer dereference issue via RPC-interface. The issue was fixed with Avast and AVG Antivirus ve… |
CVE-2020-28163 | Medium | 6.5 | 2023-04-16 | libdwarf before 20201201 allows a dwarf_print_lines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM fo… |
CVE-2023-26463 | Critical | 9.8 | 2023-04-15 | strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes within the same functi… |
CVE-2023-29569 | Medium | 5.5 | 2023-04-14 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via ffi_cb_impl_wpwwwww at src/mjs_ffi.c. This vulnerability can lead to a Denial of Service… |
CVE-2022-33294 | High | 7.5 | 2023-04-13 | Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request message. |
CVE-2022-33223 | High | 7.5 | 2023-04-13 | Transient DOS in Modem due to null pointer dereference while processing the incoming packet with http chunked encoding. |
CVE-2022-25739 | High | 7.5 | 2023-04-13 | Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call |
CVE-2023-1994 | Medium | 6.3 | 2023-04-12 | GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file |
CVE-2023-26917 | High | 7.5 | 2023-04-11 | libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lysp_stmt_validate_value at lys_parse_mem.c. |
CVE-2022-47468 | Medium | 5.5 | 2023-04-11 | In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service. |
CVE-2022-47467 | Medium | 5.5 | 2023-04-11 | In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service. |
CVE-2022-47466 | Medium | 5.5 | 2023-04-11 | In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service. |
CVE-2022-47465 | Medium | 5.5 | 2023-04-11 | In vdsp service, there is a missing permission check. This could lead to local denial of service in vdsp service. |
CVE-2023-28766 | High | 7.5 | 2023-04-11 | A vulnerability has been identified in SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 6MD86 (CP300) (All versions >= V7.80 < V9.40), SIPR… |
CVE-2020-23259 | High | 7.5 | 2023-04-04 | An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the Jsi_Strlen function in the src/jsiChar.c file. |
CVE-2023-26916 | Medium | 5.3 | 2023-04-03 | libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lys_parse_mem at lys_parse_mem.c. |
CVE-2023-28625 | High | 7.5 | 2023-04-03 | mod_auth_openidc is an authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. I… |
CVE-2023-0197 | Medium | 5.5 | 2023-04-01 | NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious user in a guest VM can cause a NULL-pointer dereference, which may… |
CVE-2022-44369 | Medium | 5.5 | 2023-03-29 | NASM 2.16 (development) is vulnerable to 476: Null Pointer Dereference via output/outaout.c. |
CVE-2022-44368 | Medium | 5.5 | 2023-03-29 | NASM v2.16 was discovered to contain a null pointer deference in the NASM component |
CVE-2022-3116 | High | 7.5 | 2023-03-27 | The Heimdal Software Kerberos 5 implementation is vulnerable to a null pointer dereferance. An attacker with network access to an application that depends on t… |
CVE-2023-1631 | Medium | 5.5 | 2023-03-25 | A vulnerability, which was classified as problematic, was found in JiangMin Antivirus 16.2.2022.418. This affects the function 0x222010 in the library kvcore.s… |
CVE-2023-1628 | Medium | 5.5 | 2023-03-25 | A vulnerability classified as problematic has been found in Jianming Antivirus 16.2.2022.418. Affected is an unknown function in the library kvcore.sys of the… |
CVE-2023-25676 | High | 7.5 | 2023-03-25 | TensorFlow is an open source machine learning platform. When running versions prior to 2.12.0 and 2.11.1 with XLA, `tf.raw_ops.ParallelConcat` segfaults with a… |
CVE-2023-25674 | High | 7.5 | 2023-03-25 | TensorFlow is an open source machine learning platform. Versions prior to 2.12.0 and 2.11.1 have a null pointer error in RandomShuffle with XLA enabled. A fix… |
CVE-2023-25672 | High | 7.5 | 2023-03-25 | TensorFlow is an open source platform for machine learning. The function `tf.raw_ops.LookupTableImportV2` cannot handle scalars in the `values` parameter and g… |
CVE-2023-25670 | High | 7.5 | 2023-03-25 | TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a null point error in QuantizedMatMulWithBiasAndDequantize… |
CVE-2023-25665 | High | 7.5 | 2023-03-25 | TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when `SparseSparseMaximum` is given invalid sparse tensors as… |
CVE-2023-25663 | High | 7.5 | 2023-03-25 | TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when `ctx->step_containter()` is a null ptr, the Lookup functi… |
CVE-2023-25660 | High | 7.5 | 2023-03-25 | TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when the parameter `summarize` of `tf.raw_ops.Print` is zero… |
CVE-2023-1583 | Medium | 5.5 | 2023-03-24 | A NULL pointer dereference was found in io_file_bitmap_get in io_uring/filetable.c in the io_uring sub-component in the Linux Kernel. When fixed files are unre… |
CVE-2023-1446 | Medium | 5.5 | 2023-03-17 | A vulnerability classified as problematic was found in Watchdog Anti-Virus 1.4.214.0. Affected by this vulnerability is the function 0x80002004/0x80002008 in t… |
CVE-2023-1444 | High | 7.5 | 2023-03-17 | A vulnerability was found in Filseclab Twister Antivirus 8. It has been rated as critical. This issue affects the function 0x8011206B in the library fildds.sys… |
CVE-2023-27787 | High | 7.5 | 2023-03-16 | An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse_list function at the list.c:81 endpoint. |
CVE-2023-27786 | High | 7.5 | 2023-03-16 | An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the macinstring function. |
CVE-2023-27785 | High | 7.5 | 2023-03-16 | An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse endpoints function. |
CVE-2023-27784 | High | 7.5 | 2023-03-16 | An issue found in TCPReplay v.4.4.3 allows a remote attacker to cause a denial of service via the read_hexstring function at the utils.c:309 endpoint. |
CVE-2023-28466 | High | 7.0 | 2023-03-16 | do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free… |
CVE-2023-27102 | Medium | 6.5 | 2023-03-15 | Libde265 v1.0.11 was discovered to contain a segmentation violation via the function decoder_context::process_slice_segment_header at decctx.cc. |
CVE-2023-24910 | High | 7.8 | 2023-03-14 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2023-24859 | High | 7.5 | 2023-03-14 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
CVE-2023-0973 | Low | 2.2 | 2023-03-13 | STEPTools v18SP1 ifcmesh library (v18.1) is affected due to a null pointer dereference, which could allow an attacker to deny application usage when reading a… |
CVE-2023-1355 | Medium | 5.5 | 2023-03-11 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1402. |
CVE-2023-25947 | Medium | 6.2 | 2023-03-10 | The bundle management subsystem within OpenHarmony-v3.1.4 and prior versions has a null pointer reference vulnerability which local attackers can exploit this… |
CVE-2023-24465 | Medium | 5.5 | 2023-03-10 | Communication Wi-Fi subsystem within OpenHarmony-v3.1.4 and prior versions, OpenHarmony-v3.0.7 and prior versions has a null pointer reference vulnerability w… |
CVE-2023-27114 | Medium | 5.5 | 2023-03-10 | radare2 v5.8.3 was discovered to contain a segmentation fault via the component wasm_dis at p/wasm/wasm.c. |
CVE-2023-0845 | Medium | 4.9 | 2023-03-09 | Consul and Consul Enterprise allowed an authenticated user with service:write permissions to trigger a workflow that causes Consul server and client agents to… |
CVE-2023-1264 | Medium | 5.5 | 2023-03-07 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392. |
CVE-2023-1186 | Low | 3.3 | 2023-03-06 | A vulnerability has been found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This vulnerability affects the function 0x222010/0… |
CVE-2023-0196 | Low | 3.3 | 2023-03-02 | NVIDIA CUDA Toolkit SDK contains a bug in cuobjdump, where a local user running the tool against an ill-formed binary may cause a null- pointer dereference, w… |
CVE-2023-23006 | Medium | 5.5 | 2023-03-01 | In the Linux kernel before 5.15.13, drivers/net/ethernet/mellanox/mlx5/core/steering/dr_domain.c misinterprets the mlx5_get_uars_page return value (expects it… |
CVE-2023-23005 | Medium | 5.5 | 2023-03-01 | In the Linux kernel before 6.2, mm/memory-tiers.c misinterprets the alloc_memory_type return value (expects it to be NULL in the error case, whereas it is actu… |
CVE-2023-23004 | Medium | 5.5 | 2023-03-01 | In the Linux kernel before 5.19, drivers/gpu/drm/arm/malidp_planes.c misinterprets the get_sg_table return value (expects it to be NULL in the error case, wher… |
CVE-2023-23002 | Medium | 5.5 | 2023-03-01 | In the Linux kernel before 5.16.3, drivers/bluetooth/hci_qca.c misinterprets the devm_gpiod_get_index_optional return value (expects it to be NULL in the error… |
CVE-2023-23001 | Medium | 5.5 | 2023-03-01 | In the Linux kernel before 5.16.3, drivers/scsi/ufs/ufs-mediatek.c misinterprets the regulator_get return value (expects it to be NULL in the error case, where… |
CVE-2023-23000 | Medium | 5.5 | 2023-03-01 | In the Linux kernel before 5.17, drivers/phy/tegra/xusb.c mishandles the tegra_xusb_find_port_node return value. Callers expect NULL in the error case, but an… |
CVE-2023-24758 | Medium | 5.5 | 2023-03-01 | libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_weighted_pred_avg_8_sse function at sse-motion.cc. This vulnerability… |
CVE-2023-24757 | Medium | 5.5 | 2023-03-01 | libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the put_unweighted_pred_16_fallback function at fallback-motion.cc. This vulnerability… |