CWE-476 · NULL Pointer Dereference (page 35)
Page 35 of 56 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-24756 | Medium | 5.5 | 2023-03-01 | libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_unweighted_pred_8_sse function at sse-motion.cc. This vulnerability al… |
CVE-2023-24755 | Medium | 5.5 | 2023-03-01 | libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the put_weighted_pred_8_fallback function at fallback-motion.cc. This vulnerability al… |
CVE-2023-24754 | Medium | 5.5 | 2023-03-01 | libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_weighted_pred_avg_8_sse function at sse-motion.cc. This vulnerability… |
CVE-2023-24752 | Medium | 5.5 | 2023-03-01 | libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_hevc_epel_pixels_8_sse function at sse-motion.cc. This vulnerability a… |
CVE-2023-24751 | Medium | 6.5 | 2023-03-01 | libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the mc_chroma function at motion.cc. This vulnerability allows attackers to cause a De… |
CVE-2023-1095 | Medium | 5.5 | 2023-02-28 | In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction object. nft_trans_destroy() calls list_d… |
CVE-2023-22999 | Medium | 5.5 | 2023-02-28 | In the Linux kernel before 5.16.3, drivers/usb/dwc3/dwc3-qcom.c misinterprets the dwc3_qcom_create_urs_usb_platdev return value (expects it to be NULL in the e… |
CVE-2023-22997 | Medium | 5.5 | 2023-02-28 | In the Linux kernel before 6.1.2, kernel/module/decompress.c misinterprets the module_get_next_page return value (expects it to be NULL in the error case, wher… |
CVE-2023-23108 | High | 7.5 | 2023-02-27 | In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a NULL pointer dereference in the function Xasc. |
CVE-2021-32844 | Medium | 6.2 | 2023-02-17 | HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior of HyperKit, ` vi_pci_write` has is a call to `… |
CVE-2021-32843 | Medium | 6.2 | 2023-02-17 | HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior of HyperKit, `virtio.c` has is a call to `vc_cf… |
CVE-2023-21593 | Medium | 5.5 | 2023-02-17 | Adobe InDesign versions ID18.1 (and earlier) and ID17.4 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker cou… |
CVE-2022-35883 | Low | 2.2 | 2023-02-16 | NULL pointer dereference in the Intel(R) Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable denial of service via l… |
CVE-2023-21700 | High | 7.5 | 2023-02-14 | Windows iSCSI Discovery Service Denial of Service Vulnerability |
CVE-2022-47360 | Medium | 5.5 | 2023-02-12 | In log service, there is a missing permission check. This could lead to local denial of service in log service. |
CVE-2022-47359 | Medium | 5.5 | 2023-02-12 | In log service, there is a missing permission check. This could lead to local denial of service in log service. |
CVE-2022-44447 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible null pointer dereference issue due to a missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-25735 | High | 7.5 | 2023-02-12 | Denial of service in modem due to missing null check while processing TCP or UDP packets from server |
CVE-2022-25733 | High | 7.5 | 2023-02-12 | Denial of service in modem due to null pointer dereference while processing DNS packets |
CVE-2023-0401 | High | 7.5 | 2023-02-08 | A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data. In case the hash algorithm used for the signa… |
CVE-2023-0217 | High | 7.5 | 2023-02-08 | An invalid pointer dereference on read can be triggered when an application tries to check a malformed DSA public key by the EVP_PKEY_public_check() function… |
CVE-2023-0216 | High | 7.5 | 2023-02-08 | An invalid pointer dereference on read can be triggered when an application tries to load malformed PKCS7 data with the d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKC… |
CVE-2022-32663 | High | 7.5 | 2023-02-06 | In Wi-Fi driver, there is a possible system crash due to null pointer dereference. This could lead to remote denial of service with no additional execution pri… |
CVE-2023-23087 | Critical | 9.8 | 2023-02-03 | An issue was found in MojoJson v1.2.3 allows attackers to execute arbitary code via the destroy function. |
CVE-2023-22839 | High | 7.5 | 2023-02-01 | On BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all version of 13.1.x, when a DNS profil… |
CVE-2023-22341 | High | 7.5 | 2023-02-01 | On version 14.1.x before 14.1.5.3, and all versions of 13.1.x, when the BIG-IP APM system is configured with all the following elements, undisclosed requests m… |
CVE-2023-22340 | High | 7.5 | 2023-02-01 | On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a SIP profile is configured on a Mess… |
CVE-2022-4285 | Medium | 5.5 | 2023-01-27 | An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of se… |
CVE-2023-0394 | Medium | 5.5 | 2023-01-26 | A NULL pointer dereference flaw was found in rawv6_push_pending_frames in net/ipv6/raw.c in the network subcomponent in the Linux kernel. This flaw causes the… |
CVE-2022-44018 | High | 7.5 | 2023-01-26 | In Softing uaToolkit Embedded before 1.40.1, a malformed PubSub discovery announcement message can cause a NULL pointer dereference or out-of-bounds memory acc… |
CVE-2022-47024 | High | 7.8 | 2023-01-20 | A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause den… |
CVE-2022-47021 | High | 7.8 | 2023-01-20 | A null pointer dereference issue was discovered in functions op_get_data and op_open1 in opusfile.c in xiph opusfile 0.9 thru 0.12 allows attackers to cause de… |
CVE-2022-47015 | Medium | 6.5 | 2023-01-20 | MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spider_db_mbase::print_warnings to dereference a null… |
CVE-2023-0122 | High | 7.5 | 2023-01-17 | A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmet_setup_auth(), allows an attacker to perform a Pre-Auth Denial of Serv… |
CVE-2022-47929 | Medium | 5.5 | 2023-01-17 | In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a denial of service (s… |
CVE-2022-4121 | Medium | 5.5 | 2023-01-17 | In libetpan a null pointer dereference in mailimap_mailbox_data_status_free in low-level/imap/mailimap_types.c was found that could lead to a remote denial of… |
CVE-2022-41860 | High | 7.5 | 2023-01-17 | In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup wil… |
CVE-2022-41858 | High | 7.1 | 2023-01-17 | A flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is in progress to detach in sl_tx_timeout in drivers/net/slip/sl… |
CVE-2022-4842 | Medium | 5.5 | 2023-01-12 | A flaw NULL Pointer Dereference in the Linux kernel NTFS3 driver function attr_punch_hole() was found. A local user could use this flaw to crash the system. |
CVE-2022-3341 | Medium | 5.3 | 2023-01-12 | A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c file. The flaw occurs because the function… |
CVE-2023-21758 | High | 7.5 | 2023-01-10 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
CVE-2023-21757 | High | 7.5 | 2023-01-10 | Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability |
CVE-2023-21683 | High | 7.5 | 2023-01-10 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
CVE-2023-21547 | High | 7.5 | 2023-01-10 | Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability |
CVE-2022-43972 | Medium | 6.5 | 2023-01-09 | A null pointer dereference vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. A null pointer dereference in the… |
CVE-2022-33299 | High | 7.5 | 2023-01-09 | Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data. |
CVE-2022-33290 | High | 7.5 | 2023-01-09 | Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed. |
CVE-2020-36646 | Low | 3.5 | 2023-01-07 | A vulnerability classified as problematic has been found in MediaArea ZenLib up to 0.4.38. This affects the function Ztring::Date_From_Seconds_1970_Local of th… |
CVE-2022-47094 | High | 7.8 | 2023-01-05 | GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Null pointer dereference via filters/dmx_m2ts.c:343 in m2tsdmx_declare_pid |
CVE-2022-34683 | Medium | 5.5 | 2022-12-30 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a null-pointer derefere… |
CVE-2022-34682 | Medium | 5.5 | 2022-12-30 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause a null-pointer dereference… |
CVE-2022-34679 | Medium | 5.5 | 2022-12-30 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unhandled return value can lead to a null-pointer deref… |
CVE-2022-34678 | Medium | 6.5 | 2022-12-30 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged user can cause a null-pointer derefere… |
CVE-2022-34675 | Medium | 5.5 | 2022-12-30 | NVIDIA Display Driver for Linux contains a vulnerability in the Virtual GPU Manager, where it does not check the return value from a null-pointer dereference… |
CVE-2022-4843 | High | 7.5 | 2022-12-29 | NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.8.2. |
CVE-2021-4236 | Critical | 9.8 | 2022-12-27 | Web Sockets do not execute any AuthenticateMethod methods which may be set, leading to a nil pointer dereference if the returned UserData pointer is assumed to… |
CVE-2021-44758 | High | 7.5 | 2022-12-26 | Heimdal before 7.7.1 allows attackers to cause a NULL pointer dereference in a SPNEGO acceptor via a preferred_mech_type of GSS_C_NO_OID and a nonzero initial_… |
CVE-2022-43603 | Medium | 5.9 | 2022-12-22 | A denial of service vulnerability exists in the ZfileOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput… |
CVE-2022-43595 | Medium | 5.9 | 2022-12-22 | Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially crafted Image… |
CVE-2022-43594 | Medium | 5.9 | 2022-12-22 | Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially crafted Image… |
CVE-2022-43593 | Medium | 5.9 | 2022-12-22 | A denial of service vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput O… |
CVE-2022-41999 | High | 7.5 | 2022-12-22 | A denial of service vulnerability exists in the DDS native tile reading functionality of OpenImageIO Project OpenImageIO v2.3.19.0 and v2.4.4.2. A specially-cr… |
CVE-2022-42928 | High | 8.8 | 2022-12-22 | Certain types of allocations were missing annotations that, if the Garbage Collector was in a specific state, could have lead to memory corruption and a potent… |
CVE-2022-41972 | Low | 2.9 | 2022-12-16 | Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. Versions prior to 4.9 contain a NULL Pointer Dereference in BLE… |
CVE-2022-42527 | High | 7.5 | 2022-12-16 | In cd_SsParseMsg of cd_SsCodec.c, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional executi… |
CVE-2022-20521 | Medium | 5.0 | 2022-12-16 | In sdpu_find_most_specific_service_uuid of sdp_utils.cc, there is a possible way to crash Bluetooth due to a missing null check. This could lead to local denia… |
CVE-2022-3109 | High | 7.5 | 2022-12-16 | An issue was discovered in the FFmpeg package, where vp3_decode_frame in libavcodec/vp3.c lacks check of the return value of av_malloc() and will cause a null… |
CVE-2022-23526 | Medium | 5.3 | 2022-12-15 | Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to NULL Pointer Dereference in the_chartutil_ pac… |
CVE-2022-23525 | Medium | 5.3 | 2022-12-15 | Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to NULL Pointer Dereference in the _repo_package… |
CVE-2022-3115 | Medium | 5.5 | 2022-12-14 | An issue was discovered in the Linux kernel through 5.16-rc6. malidp_crtc_reset in drivers/gpu/drm/arm/malidp_crtc.c lacks check of the return value of kzalloc… |
CVE-2022-3114 | Medium | 5.5 | 2022-12-14 | An issue was discovered in the Linux kernel through 5.16-rc6. imx_register_uart_clocks in drivers/clk/imx/clk.c lacks check of the return value of kcalloc() an… |
CVE-2022-3113 | Medium | 5.5 | 2022-12-14 | An issue was discovered in the Linux kernel through 5.16-rc6. mtk_vcodec_fw_vpu_init in drivers/media/platform/mtk-vcodec/mtk_vcodec_fw_vpu.c lacks check of th… |
CVE-2022-3112 | Medium | 5.5 | 2022-12-14 | An issue was discovered in the Linux kernel through 5.16-rc6. amvdec_set_canvases in drivers/staging/media/meson/vdec/vdec_helpers.c lacks check of the return… |
CVE-2022-3111 | Medium | 5.5 | 2022-12-14 | An issue was discovered in the Linux kernel through 5.16-rc6. free_charger_irq() in drivers/power/supply/wm8350_power.c lacks free of WM8350_IRQ_CHG_FAST_RDY… |
CVE-2022-3110 | Medium | 5.5 | 2022-12-14 | An issue was discovered in the Linux kernel through 5.16-rc6. _rtw_init_xmit_priv in drivers/staging/r8188eu/core/rtw_xmit.c lacks check of the return value of… |
CVE-2022-3107 | Medium | 5.5 | 2022-12-14 | An issue was discovered in the Linux kernel through 5.16-rc6. netvsc_get_ethtool_stats in drivers/net/hyperv/netvsc_drv.c lacks check of the return value of kv… |
CVE-2022-3106 | Medium | 5.5 | 2022-12-14 | An issue was discovered in the Linux kernel through 5.16-rc6. ef100_update_stats in drivers/net/ethernet/sfc/ef100_nic.c lacks check of the return value of kma… |
CVE-2022-3105 | Medium | 5.5 | 2022-12-14 | An issue was discovered in the Linux kernel through 5.16-rc6. uapi_finalize in drivers/infiniband/core/uverbs_uapi.c lacks check of kmalloc_array(). |
CVE-2022-3104 | Medium | 5.5 | 2022-12-14 | An issue was discovered in the Linux kernel through 5.16-rc6. lkdtm_ARRAY_BOUNDS in drivers/misc/lkdtm/bugs.c lacks check of the return value of kmalloc() and… |
CVE-2022-41280 | Low | 3.3 | 2022-12-13 | A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V… |
CVE-2022-41279 | Low | 3.3 | 2022-12-13 | A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V… |
CVE-2022-41278 | Low | 3.3 | 2022-12-13 | A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V… |
CVE-2022-23476 | High | 7.5 | 2022-12-08 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Nokogiri `1.13.8` and `1.13.9` fail to check the return value from `xmlTextR… |
CVE-2022-4128 | Medium | 5.5 | 2022-11-28 | A NULL pointer dereference issue was discovered in the Linux kernel in the MPTCP protocol when traversing the subflow list at disconnect time. A local user cou… |
CVE-2022-4127 | Medium | 5.5 | 2022-11-28 | A NULL pointer dereference issue was discovered in the Linux kernel in io_files_update_with_index_alloc. A local user could use this flaw to potentially crash… |
CVE-2022-43590 | Medium | 5.5 | 2022-11-28 | A null pointer dereference vulnerability exists in the handle_ioctl_0x830a0_systembuffer functionality of Callback technologies CBFS Filter 20.0.8317. A specia… |
CVE-2022-43589 | Medium | 5.5 | 2022-11-28 | A null pointer dereference vulnerability exists in the handle_ioctl_8314C functionality of Callback technologies CBFS Filter 20.0.8317. A specially crafted I/O… |
CVE-2022-43588 | Medium | 5.5 | 2022-11-28 | A null pointer dereference vulnerability exists in the handle_ioctl_83150 functionality of Callback technologies CBFS Filter 20.0.8317. A specially crafted I/O… |
CVE-2022-36227 | Critical | 9.8 | 2022-11-22 | In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, w… |
CVE-2022-34665 | Medium | 6.5 | 2022-11-19 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a local user with basic capabilities can cause a null-… |
CVE-2022-31615 | Medium | 5.5 | 2022-11-19 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a local user with basic capabilities can cause a null-pointer dere… |
CVE-2022-31613 | High | 7.1 | 2022-11-19 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where any local user can cause a null-pointer dereference, which may l… |
CVE-2022-41909 | Medium | 4.8 | 2022-11-18 | TensorFlow is an open source platform for machine learning. An input `encoded` that is not a valid `CompositeTensorVariant` tensor will trigger a segfault in `… |
CVE-2022-41889 | Medium | 5.5 | 2022-11-18 | TensorFlow is an open source platform for machine learning. If a list of quantized tensors is assigned to an attribute, the pywrap code fails to parse the tens… |
CVE-2022-25741 | High | 7.5 | 2022-11-15 | Denial of service in WLAN due to potential null pointer dereference while accessing the memory location in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn… |
CVE-2022-25710 | High | 7.5 | 2022-11-15 | Denial of service due to null pointer dereference when GATT is disconnected in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon… |
CVE-2022-37290 | Medium | 5.5 | 2022-11-14 | GNOME Nautilus 42.2 allows a NULL pointer dereference and get_basename application crash via a pasted ZIP archive. |
CVE-2022-27497 | High | 8.6 | 2022-11-11 | Null pointer dereference in firmware for Intel(R) AMT before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticat… |
CVE-2022-34666 | Medium | 6.5 | 2022-11-10 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a local user with basic capabilities can cause a null-… |
CVE-2022-44793 | Medium | 6.5 | 2022-11-07 | handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote att… |