CWE-476 · NULL Pointer Dereference (page 35)
Page 35 of 57 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-24847 | High | 7.5 | 2023-10-03 | Transient DOS in Modem while allocating DSM items. |
CVE-2022-48606 | High | 7.5 | 2023-09-27 | Stability-related vulnerability in the binder background management and control module. Successful exploitation of this vulnerability may affect availability. |
CVE-2023-20233 | Medium | 4.3 | 2023-09-13 | A vulnerability in the Connectivity Fault Management (CFM) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial o… |
CVE-2023-40032 | Medium | 5.5 | 2023-09-11 | libvips is a demand-driven, horizontally threaded image processing library. A specially crafted SVG input can cause libvips versions 8.14.3 or earlier to segfa… |
CVE-2023-4875 | Low | 2.2 | 2023-09-09 | Null pointer dereference when composing from a specially crafted draft message in Mutt >1.5.2 <2.2.12 |
CVE-2023-4874 | Medium | 4.3 | 2023-09-09 | Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2 <2.2.12 |
CVE-2023-37368 | Medium | 5.9 | 2023-09-08 | An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem (Exynos Mobile Processor, Automotive Processor, and Modem - Exynos… |
CVE-2023-41909 | High | 7.5 | 2023-09-05 | An issue was discovered in FRRouting FRR through 9.0. bgp_nlri_parse_flowspec in bgpd/bgp_flowspec.c processes malformed requests with no attributes, leading t… |
CVE-2023-41633 | Medium | 5.5 | 2023-09-01 | Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/fileutil.c. |
CVE-2023-39351 | Medium | 5.3 | 2023-08-31 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions of FreeRDP are subject to a Null Po… |
CVE-2023-4683 | Medium | 5.5 | 2023-08-31 | NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3-DEV. |
CVE-2023-4681 | Medium | 5.5 | 2023-08-31 | NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3-DEV. |
CVE-2023-41358 | High | 7.5 | 2023-08-29 | An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c processes NLRIs if the attribute length is zero. |
CVE-2023-38712 | Medium | 6.5 | 2023-08-25 | An issue was discovered in Libreswan 3.x and 4.x before 4.12. When an IKEv1 ISAKMP SA Informational Exchange packet contains a Delete/Notify payload followed b… |
CVE-2023-38711 | Medium | 6.5 | 2023-08-25 | An issue was discovered in Libreswan before 4.12. When an IKEv1 Quick Mode connection configured with ID_IPV4_ADDR or ID_IPV6_ADDR receives an IDcr payload wit… |
CVE-2023-36199 | High | 7.5 | 2023-08-25 | An issue in skalenetwork sgxwallet v.1.9.0 and below allows an attacker to cause a denial of service via the trustedGenerateEcdsaKey component. |
CVE-2023-38665 | Medium | 5.5 | 2023-08-22 | Null pointer dereference in ieee_write_file in nasm 2.16rc0 allows attackers to cause a denial of service (crash). |
CVE-2022-47022 | Medium | 4.7 | 2023-08-22 | An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c. |
CVE-2022-36648 | Critical | 10.0 | 2023-08-22 | The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers to crash the host q… |
CVE-2022-35206 | Medium | 5.5 | 2023-08-22 | Null pointer dereference vulnerability in Binutils readelf 2.38.50 via function read_and_display_attr_value in file dwarf.c. |
CVE-2022-28070 | High | 7.5 | 2023-08-22 | A null pointer deference in __core_anal_fcn function in radare2 5.4.2 and 5.4.0. |
CVE-2021-40266 | Medium | 6.5 | 2023-08-22 | FreeImage before 1.18.0, ReadPalette function in PluginTIFF.cpp is vulnerabile to null pointer dereference. |
CVE-2021-40264 | Medium | 6.5 | 2023-08-22 | NULL pointer dereference vulnerability in FreeImage before 1.18.0 via the FreeImage_CloneTag function inFreeImageTag.cpp. |
CVE-2020-18378 | Medium | 6.5 | 2023-08-22 | A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c in Binaryen 1.38.26. A crafted wasm input can cause a se… |
CVE-2023-4459 | Medium | 5.5 | 2023-08-21 | A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxnet3 in the Linux Ke… |
CVE-2023-39669 | High | 7.5 | 2023-08-18 | D-Link DIR-880 A1_FW107WWb08 was discovered to contain a NULL pointer dereference in the function FUN_00010824. |
CVE-2023-4385 | Medium | 5.5 | 2023-08-16 | A NULL pointer dereference flaw was found in dbFree in fs/jfs/jfs_dmap.c in the journaling file system (JFS) in the Linux Kernel. This issue may allow a local… |
CVE-2023-40360 | Medium | 5.5 | 2023-08-14 | QEMU through 8.0.4 accesses a NULL pointer in nvme_directive_receive in hw/nvme/ctrl.c because there is no check for whether an endurance group is configured b… |
CVE-2023-39397 | High | 7.5 | 2023-08-13 | Input parameter verification vulnerability in the communication system. Successful exploitation of this vulnerability may affect availability. |
CVE-2021-3236 | Medium | 5.5 | 2023-08-11 | vim 8.2.2348 is affected by null pointer dereference, allows local attackers to cause a denial of service (DoS) via the ex_buffer_all method. |
CVE-2020-36138 | High | 7.5 | 2023-08-11 | An issue was discovered in decode_frame in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service (DoS). |
CVE-2020-36024 | Medium | 5.5 | 2023-08-11 | An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C… |
CVE-2020-24187 | Medium | 5.5 | 2023-08-11 | An issue was discovered in ecma-helpers.c in jerryscript version 2.3.0, allows local attackers to cause a denial of service (DoS) (Null Pointer Dereference). |
CVE-2023-38524 | Low | 3.3 | 2023-08-08 | A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions <… |
CVE-2023-37732 | Medium | 5.5 | 2023-07-26 | Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a cr… |
CVE-2023-38670 | Medium | 4.7 | 2023-07-26 | Null pointer dereference in paddle.flip in PaddlePaddle before 2.5.0. This resulted in a runtime crash and denial of service. |
CVE-2023-3772 | Medium | 5.5 | 2023-07-25 | A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privile… |
CVE-2023-32252 | High | 7.5 | 2023-07-24 | A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_LOGOFF commands. Th… |
CVE-2023-32248 | High | 7.5 | 2023-07-24 | A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_TREE_CONNECT and SM… |
CVE-2023-3603 | Low | 3.1 | 2023-07-21 | A missing allocation check in sftp server processing read requests may cause a NULL dereference on low-memory conditions. The malicious client can request up t… |
CVE-2023-31441 | Medium | 5.5 | 2023-07-18 | In NATO Communications and Information Agency anet (aka Advisor Network) through 3.3.0, an attacker can provide a crafted JSON file to sanitizeJson and cause a… |
CVE-2020-23911 | Medium | 5.5 | 2023-07-18 | An issue was discovered in asn1c through v0.9.28. A NULL pointer dereference exists in the function _default_error_logger() located in asn1fix.c. It allows an… |
CVE-2023-37456 | Medium | 6.5 | 2023-07-12 | The session restore helper crashed whenever there was no parameter sent to the message handler. This vulnerability affects Firefox for iOS < 115. |
CVE-2023-3106 | Medium | 6.6 | 2023-07-12 | A NULL pointer dereference vulnerability was found in netlink_dump. This issue can occur when the Netlink socket receives the message(sendmsg) for the XFRM_MSG… |
CVE-2023-29984 | High | 7.5 | 2023-07-11 | Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3. Processing a specially crafted… |
CVE-2023-35338 | High | 7.5 | 2023-07-11 | Windows Peer Name Resolution Protocol Denial of Service Vulnerability |
CVE-2023-32084 | High | 7.5 | 2023-07-11 | HTTP.sys Denial of Service Vulnerability |
CVE-2023-3354 | High | 7.5 | 2023-07-11 | A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a cer… |
CVE-2023-0359 | Medium | 5.9 | 2023-07-10 | A missing nullptr-check in handle_ra_input can cause a nullptr-deref. |
CVE-2021-33798 | Medium | 4.7 | 2023-07-07 | A null pointer dereference was found in libpano13, version libpano13-2.9.20. The flow allows attackers to cause a denial of service and potential code execute… |
CVE-2023-34164 | High | 7.5 | 2023-07-06 | Vulnerability of incomplete input parameter verification in the communication framework module. Successful exploitation of this vulnerability may affect availa… |
CVE-2022-48509 | Medium | 5.9 | 2023-07-06 | Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Share. Successful exploitation of this vulnerability may caus… |
CVE-2023-25523 | Low | 3.3 | 2023-07-04 | NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the nvdisasm binary file, where an attacker may cause a NULL pointer dereference by pr… |
CVE-2023-3338 | Medium | 6.5 | 2023-06-30 | A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol. This issue could allow a remote user to crash the system. |
CVE-2023-2908 | Medium | 5.5 | 2023-06-30 | A null pointer dereference issue was found in Libtiff's tif_dir.c file. This issue may allow an attacker to pass a crafted TIFF image file to the tiffcp utilit… |
CVE-2023-3359 | Medium | 5.5 | 2023-06-28 | An issue was discovered in the Linux kernel brcm_nvram_parse in drivers/nvmem/brcm_nvram.c. Lacks for the check of the return value of kzalloc() can cause the… |
CVE-2023-3358 | Medium | 5.5 | 2023-06-28 | A null pointer dereference was found in the Linux kernel's Integrated Sensor Hub (ISH) driver. This issue could allow a local user to crash the system. |
CVE-2023-3357 | Medium | 5.5 | 2023-06-28 | A NULL pointer dereference flaw was found in the Linux kernel AMD Sensor Fusion Hub driver. This flaw allows a local user to crash the system. |
CVE-2023-3355 | Medium | 4.7 | 2023-06-28 | A NULL pointer dereference flaw was found in the Linux kernel's drivers/gpu/drm/msm/msm_gem_submit.c code in the submit_lookup_cmds function, which fails becau… |
CVE-2023-3212 | Medium | 4.4 | 2023-06-23 | A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to ref… |
CVE-2023-3220 | Medium | 5.5 | 2023-06-20 | An issue was discovered in the Linux kernel through 6.1-rc8. dpu_crtc_atomic_check in drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c lacks check of the return value… |
CVE-2023-3316 | Medium | 5.9 | 2023-06-19 | A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null)… |
CVE-2023-33307 | Medium | 6.5 | 2023-06-16 | A null pointer dereference in Fortinet FortiOS before 7.2.5 and before 7.0.11, FortiProxy before 7.2.3 and before 7.0.9 allows attacker to denial of sslvpn ser… |
CVE-2023-33306 | Medium | 6.5 | 2023-06-16 | A null pointer dereference in Fortinet FortiOS before 7.2.5, before 7.0.11 and before 6.4.13, FortiProxy before 7.2.4 and before 7.0.10 allows attacker to den… |
CVE-2023-32008 | High | 7.8 | 2023-06-14 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability |
CVE-2023-24938 | Medium | 6.5 | 2023-06-14 | Windows CryptoAPI Denial of Service Vulnerability |
CVE-2023-33121 | Low | 3.3 | 2023-06-13 | A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V… |
CVE-2022-48445 | Medium | 5.5 | 2023-06-06 | In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. |
CVE-2022-48444 | Medium | 5.5 | 2023-06-06 | In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. |
CVE-2022-48443 | Medium | 5.5 | 2023-06-06 | In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. |
CVE-2022-48442 | Medium | 5.5 | 2023-06-06 | In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. |
CVE-2023-29539 | High | 8.8 | 2023-06-02 | When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character. This could… |
CVE-2023-33461 | Medium | 5.5 | 2023-06-01 | iniparser v4.1 is vulnerable to NULL Pointer Dereference in function iniparser_getlongint which misses check NULL for function iniparser_getstring's return. |
CVE-2023-3012 | High | 7.8 | 2023-05-31 | NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.2.2. |
CVE-2023-2953 | High | 7.5 | 2023-05-30 | A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function. |
CVE-2023-0779 | Medium | 6.7 | 2023-05-30 | At the most basic level, an invalid pointer can be input that crashes the device, but with more knowledge of the device’s memory layout, further exploitation i… |
CVE-2023-33973 | High | 7.5 | 2023-05-30 | RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames. In versions 2023.01 and… |
CVE-2023-24825 | High | 7.5 | 2023-05-30 | RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2023.0… |
CVE-2023-2898 | Medium | 4.7 | 2023-05-26 | There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileged user to cause a… |
CVE-2023-1667 | Medium | 6.5 | 2023-05-26 | A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of serv… |
CVE-2023-2875 | Medium | 5.5 | 2023-05-24 | A vulnerability, which was classified as problematic, was found in eScan Antivirus 22.0.1400.2443. Affected is the function 0x22E008u in the library PROCOBSRVE… |
CVE-2023-2872 | Medium | 5.5 | 2023-05-24 | A vulnerability classified as problematic has been found in FlexiHub 5.5.14691.0. This affects the function 0x220088 in the library fusbhub.sys of the componen… |
CVE-2023-2871 | Low | 3.3 | 2023-05-24 | A vulnerability was found in FabulaTech USB for Remote Desktop 6.1.0.0. It has been rated as problematic. Affected by this issue is the function 0x220448/0x220… |
CVE-2023-2840 | Critical | 9.8 | 2023-05-22 | NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.2.2. |
CVE-2023-24832 | High | 7.5 | 2023-05-18 | A null pointer dereference bug in Hermes prior to commit 5cae9f72975cf0e5a62b27fdd8b01f103e198708 could have been used by an attacker to crash an Hermes runtim… |
CVE-2023-2731 | Medium | 5.5 | 2023-05-17 | A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file. This flaw allows a local attacker to craft specific… |
CVE-2022-42878 | Low | 2.8 | 2023-05-10 | Null pointer dereference for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to… |
CVE-2022-29508 | Medium | 6.3 | 2023-05-10 | Null pointer dereference in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalation of privilege… |
CVE-2023-2617 | Medium | 5.3 | 2023-05-10 | A vulnerability classified as problematic was found in OpenCV wechat_qrcode Module up to 4.7.0. Affected by this vulnerability is the function DecodedBitStream… |
CVE-2023-2609 | Medium | 5.5 | 2023-05-09 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531. |
CVE-2023-24940 | High | 7.5 | 2023-05-09 | Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability |
CVE-2022-48241 | Medium | 5.5 | 2023-05-09 | In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. |
CVE-2022-48231 | Medium | 5.5 | 2023-05-09 | In soter service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. |
CVE-2023-31129 | High | 7.5 | 2023-05-08 | The Contiki-NG operating system versions 4.8 and prior can be triggered to dereference a NULL pointer in the message handling code for IPv6 router solicitiatio… |
CVE-2023-29996 | High | 7.5 | 2023-05-04 | In NanoMQ v0.15.0-0, segment fault with Null Pointer Dereference occurs in the process of decoding subinfo_decode and unsubinfo_decode. |
CVE-2022-33305 | High | 7.5 | 2023-05-02 | Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH. |
CVE-2022-33304 | High | 7.5 | 2023-05-02 | Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet. |
CVE-2023-0458 | Medium | 5.3 | 2023-04-26 | A speculative pointer dereference problem exists in the Linux Kernel on the do_prlimit() function. The resource argument value is controlled and is used in poi… |
CVE-2022-42335 | High | 7.8 | 2023-04-25 | x86 shadow paging arbitrary pointer dereference In environments where host assisted address translation is necessary but Hardware Assisted Paging (HAP) is unav… |
CVE-2023-28484 | Medium | 6.5 | 2023-04-24 | In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occurs in xmlSchemaFi… |