CWE-476 · NULL Pointer Dereference (page 36)
Page 36 of 56 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-44792 | Medium | 6.5 | 2022-11-07 | handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker… |
CVE-2022-43495 | Medium | 6.5 | 2022-11-03 | OpenHarmony-v3.1.2 and prior versions had a DOS vulnerability in distributedhardware_device_manager when joining a network. Network attakcers can send an abono… |
CVE-2022-39381 | High | 7.5 | 2022-11-02 | Muhammara is a node module with c/cpp bindings to modify PDF with js for node or electron (based/replacement on/of galkhana/hummusjs). The package muhammara be… |
CVE-2022-3663 | Medium | 5.3 | 2022-10-26 | A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. This issue affects the function AP4_StsdAtom of the file Ap4StsdAtom.cpp of th… |
CVE-2022-39837 | Medium | 5.5 | 2022-10-25 | An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted DLT file that cras… |
CVE-2022-3621 | Medium | 4.3 | 2022-10-20 | A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function nilfs_bmap_lookup_at_level of the file fs/nilfs2/ino… |
CVE-2022-41787 | High | 7.5 | 2022-10-19 | In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, when DNS profile… |
CVE-2022-22232 | High | 7.5 | 2022-10-18 | A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based at… |
CVE-2022-35691 | Medium | 5.5 | 2022-10-14 | Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenti… |
CVE-2022-2850 | Medium | 6.5 | 2022-10-14 | A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a special… |
CVE-2022-41603 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41602 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41601 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41600 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41598 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41597 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41595 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41594 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41593 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41592 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-42722 | Medium | 5.5 | 2022-10-14 | In the Linux kernel 5.8 through 5.19.x before 5.19.16, local attackers able to inject WLAN frames into the mac80211 stack could cause a NULL pointer dereferenc… |
CVE-2022-3358 | High | 7.5 | 2022-10-11 | OpenSSL supports creating a custom cipher via the legacy EVP_CIPHER_meth_new() function and associated function calls. This function was deprecated in OpenSSL… |
CVE-2022-31681 | Medium | 6.5 | 2022-10-07 | VMware ESXi contains a null-pointer deference vulnerability. A malicious actor with privileges within the VMX process only, may create a denial of service cond… |
CVE-2022-2928 | Medium | 6.5 | 2022-10-07 | In ISC DHCP 4.4.0 -> 4.4.3, ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16-P1, when the function option_code_hash_lookup() is called from add_option(), it increases the op… |
CVE-2022-42306 | Medium | 6.5 | 2022-10-03 | An issue was discovered in Veritas NetBackup through 8.2 and related Veritas products. An attacker with local access can send a crafted packet to pbx_exchange… |
CVE-2022-41843 | Medium | 5.5 | 2022-09-30 | An issue was discovered in Xpdf 4.04. There is a crash in convertToType0 in fofi/FoFiType1C.cc, a different vulnerability than CVE-2022-38928. |
CVE-2022-41841 | Medium | 5.5 | 2022-09-30 | An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in AP4_File::ParseStream in Core/Ap4File.cpp, which is called from AP4_F… |
CVE-2022-1725 | Medium | 5.5 | 2022-09-29 | NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959. |
CVE-2022-3278 | Medium | 5.5 | 2022-09-23 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0552. |
CVE-2022-32785 | Medium | 5.5 | 2022-09-23 | A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, Security Update 2022-005 Catalina, macOS Bi… |
CVE-2022-2973 | High | 8.6 | 2022-09-23 | MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) uses a NULL pointer in certain situa… |
CVE-2022-38928 | High | 7.8 | 2022-09-21 | XPDF 4.04 is vulnerable to Null Pointer Dereference in FoFiType1C.cc:2393. |
CVE-2022-35087 | Medium | 5.5 | 2022-09-21 | SWFTools commit 772e55a2 was discovered to contain a segmentation violation via MovieAddFrame at /src/gif2swf.c. |
CVE-2022-40775 | Medium | 5.5 | 2022-09-18 | An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in AP4_StszAtom::WriteFields. |
CVE-2022-40774 | Medium | 5.5 | 2022-09-18 | An issue was discovered in Bento4 through 1.6.0-639. There is a NULL pointer dereference in AP4_StszAtom::GetSampleSize. |
CVE-2022-36014 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `mlir::tfg::TFOp::nameAttr` receives null type list attributes, it crashes. We have patched th… |
CVE-2022-36013 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `mlir::tfg::GraphDefImporter::ConvertNodeDef` tries to convert NodeDefs without an op name, it… |
CVE-2022-36011 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `mlir::tfg::ConvertGenericFunctionToFunctionDef` is given empty function attributes, it gives… |
CVE-2022-36000 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `mlir::tfg::ConvertGenericFunctionToFunctionDef` is given empty function attributes, it gives… |
CVE-2022-40759 | High | 7.5 | 2022-09-16 | A NULL pointer dereference issue in the TEE_MACCompareFinal function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Servic… |
CVE-2022-35965 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `LowerBound` or `UpperBound` is given an empty`sorted_inputs` input, it results in a `nullptr` d… |
CVE-2022-40738 | Medium | 6.5 | 2022-09-15 | An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in AP4_DescriptorListWriter::Action in Core/Ap4Descriptor.h, called from… |
CVE-2022-40476 | Medium | 5.5 | 2022-09-14 | A null pointer dereference issue was discovered in fs/io_uring.c in the Linux kernel before 5.15.62. A local user could use this flaw to crash the system or po… |
CVE-2022-3202 | High | 7.1 | 2022-09-14 | A NULL pointer dereference flaw in diFree in fs/jfs/inode.c in Journaled File System (JFS)in the Linux kernel. This could allow a local attacker to crash the s… |
CVE-2022-38497 | Medium | 5.5 | 2022-09-13 | LIEF commit 365a16a was discovered to contain a segmentation violation via the component CoreFile.tcc:69. |
CVE-2022-38307 | Medium | 5.5 | 2022-09-13 | LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF::MachO::SegmentCommand::file_offset() at /MachO/SegmentCommand.cpp. |
CVE-2022-37797 | High | 7.5 | 2022-09-12 | In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It leads to null… |
CVE-2022-38096 | Medium | 6.3 | 2022-09-09 | A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/… |
CVE-2022-3153 | Medium | 5.5 | 2022-09-08 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404. |
CVE-2022-36661 | Medium | 6.5 | 2022-09-07 | xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vi_pci_read(). This vulnerability allows attackers to cause a Denia… |
CVE-2022-36659 | Medium | 6.5 | 2022-09-07 | xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vi_pci_write(). This vulnerability allows attackers to cause a Deni… |
CVE-2022-25310 | Medium | 5.5 | 2022-09-06 | A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. This flaw all… |
CVE-2022-39829 | High | 7.5 | 2022-09-05 | There is a NULL pointer dereference in aes256_encrypt in Samsung mTower through 0.3.0 due to a missing check on the return value of EVP_CIPHER_CTX_new. |
CVE-2021-35135 | Medium | 6.2 | 2022-09-02 | A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT… |
CVE-2022-3078 | Medium | 5.5 | 2022-09-01 | An issue was discovered in the Linux kernel through 5.16-rc6. There is a lack of check after calling vzalloc() and lack of free after allocation in drivers/med… |
CVE-2022-36622 | High | 7.5 | 2022-09-01 | Samsung Electronics mTower v0.3.0 and earlier was discovered to contain a NULL pointer dereference via the function TEE_GetObjectInfo1. |
CVE-2022-36621 | High | 7.5 | 2022-09-01 | Samsung Electronics mTower v0.3.0 and earlier was discovered to contain a NULL pointer dereference via the function TEE_AllocateTransientObject. |
CVE-2020-35525 | High | 7.5 | 2022-09-01 | In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing. |
CVE-2022-2153 | Medium | 5.5 | 2022-08-31 | A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs… |
CVE-2022-1263 | Medium | 5.5 | 2022-08-31 | A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allows an unprivileged local attacker on the… |
CVE-2022-1205 | Medium | 4.7 | 2022-08-31 | A NULL pointer dereference flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This f… |
CVE-2020-35538 | Medium | 5.5 | 2022-08-31 | A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo. |
CVE-2021-46837 | Medium | 6.5 | 2022-08-30 | res_pjsip_t38 in Sangoma Asterisk 16.x before 16.16.2, 17.x before 17.9.3, and 18.x before 18.2.2, and Certified Asterisk before 16.8-cert7, allows an attacker… |
CVE-2022-39028 | High | 7.5 | 2022-08-30 | telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer dereference via 0xff 0xf7 or 0xff 0xf8. In a typical… |
CVE-2022-1199 | High | 7.5 | 2022-08-29 | A flaw was found in the Linux kernel. This flaw allows an attacker to crash the Linux kernel by simulating amateur radio from the user space, resulting in a nu… |
CVE-2022-0168 | Medium | 4.4 | 2022-08-26 | A denial of service (DOS) issue was found in the Linux kernel’s smb2_ioctl_query_info function in the fs/cifs/smb2ops.c Common Internet File System (CIFS) due… |
CVE-2022-2980 | Medium | 5.5 | 2022-08-25 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259. |
CVE-2021-42521 | High | 7.5 | 2022-08-25 | There is a NULL pointer dereference vulnerability in VTK before 9.2.5, and it lies in IO/Infovis/vtkXMLTreeReader.cxx. The vendor didn't check the return value… |
CVE-2021-4217 | Low | 3.3 | 2022-08-24 | A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows… |
CVE-2021-4209 | Medium | 6.5 | 2022-08-24 | A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined… |
CVE-2021-4158 | Medium | 6.0 | 2022-08-24 | A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user within the guest could use this flaw to crash the QEMU proces… |
CVE-2022-2923 | Medium | 5.5 | 2022-08-22 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240. |
CVE-2021-3659 | Medium | 5.5 | 2022-08-22 | A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection… |
CVE-2022-2874 | Medium | 5.5 | 2022-08-18 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224. |
CVE-2022-2547 | High | 7.5 | 2022-08-17 | A crafted HTTP packet without a content-type header can create a denial-of-service condition in Softing Secure Integration Server V1.22. |
CVE-2022-2337 | High | 7.5 | 2022-08-17 | A crafted HTTP packet with a missing HTTP URI can create a denial-of-service condition in Softing Secure Integration Server V1.22. |
CVE-2022-1748 | High | 7.5 | 2022-08-17 | Softing OPC UA C++ Server SDK, Secure Integration Server, edgeConnector, edgeAggregator, OPC Suite, and uaGate are affected by a NULL pointer dereference vulne… |
CVE-2022-36186 | High | 7.5 | 2022-08-17 | A Null Pointer dereference vulnerability exists in GPAC 2.1-DEV-revUNKNOWN-master via the function gf_filter_pid_set_property_full () at filter_core/filter_pid… |
CVE-2022-36153 | Medium | 5.5 | 2022-08-16 | tifig v0.2.2 was discovered to contain a segmentation violation via std::vector<unsigned int, std::allocator<unsigned int> >::size() const at /bits/stl_vector… |
CVE-2022-36151 | Medium | 5.5 | 2022-08-16 | tifig v0.2.2 was discovered to contain a segmentation violation via getType() at /common/bbox.cpp. |
CVE-2022-35484 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6b6a8f. |
CVE-2022-35108 | Medium | 5.5 | 2022-08-16 | SWFTools commit 772e55a2 was discovered to contain a segmentation violation via DCTStream::getChar() at /xpdf/Stream.cc. |
CVE-2022-2832 | High | 7.5 | 2022-08-16 | A flaw was found in Blender 3.3.0. A null pointer dereference exists in source/blender/gpu/opengl/gl_backend.cc that may lead to loss of confidentiality and in… |
CVE-2022-20334 | Medium | 6.5 | 2022-08-12 | In Bluetooth, there are possible process crashes due to dereferencing a null pointer. This could lead to remote denial of service with no additional execution… |
CVE-2022-20333 | Medium | 6.5 | 2022-08-12 | In Bluetooth, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed… |
CVE-2022-26979 | High | 7.5 | 2022-08-06 | Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow a NULL pointer dereference when this.Span is used for oState of Collab.addStateModel, because… |
CVE-2022-27944 | High | 7.5 | 2022-08-06 | Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow an exportXFAData NULL pointer dereference. |
CVE-2022-31618 | Medium | 5.5 | 2022-08-05 | NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can dereference a null pointer, which may lead to denial of se… |
CVE-2022-35245 | High | 7.5 | 2022-08-04 | In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5.1, when a BIG-IP APM access policy is configured on a virtual serve… |
CVE-2022-34651 | High | 7.5 | 2022-08-04 | In BIG-IP Versions 16.1.x before 16.1.3.1 and 15.1.x before 15.1.6.1, when an LTM Client or Server SSL profile with TLS 1.3 enabled is configured on a virtual… |
CVE-2022-34969 | High | 7.5 | 2022-08-03 | PingCAP TiDB v6.1.0 was discovered to contain a NULL pointer dereference. |
CVE-2022-25867 | High | 7.5 | 2022-08-02 | The package io.socket:socket.io-client before 2.0.1 are vulnerable to NULL Pointer Dereference when parsing a packet with with invalid payload format. |
CVE-2022-34556 | Medium | 5.5 | 2022-07-28 | PicoC v3.2.2 was discovered to contain a NULL pointer dereference at variable.c. |
CVE-2022-2549 | Medium | 5.5 | 2022-07-27 | NULL Pointer Dereference in GitHub repository gpac/gpac prior to v2.1.0-DEV. |
CVE-2022-1671 | High | 7.1 | 2022-07-26 | A NULL pointer dereference flaw was found in rxrpc_preparse_s in net/rxrpc/server_key.c in the Linux kernel. This flaw allows a local attacker to crash the sys… |
CVE-2021-33466 | Medium | 5.5 | 2022-07-26 | An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expand_smacro() in modules/preprocs/nasm/nasm-pp.c. |
CVE-2021-33465 | Medium | 5.5 | 2022-07-26 | An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expand_mmacro() in modules/preprocs/nasm/nasm-pp.c. |
CVE-2021-33463 | Medium | 5.5 | 2022-07-26 | An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in yasm_expr__copy_except() in libyasm/expr.c. |
CVE-2021-33460 | Medium | 5.5 | 2022-07-26 | An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in if_condition() in modules/preprocs/nasm/nasm-pp.c. |
CVE-2021-33459 | Medium | 5.5 | 2022-07-26 | An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in nasm_parser_directive() in modules/parsers/nasm/nasm-parse.c. |