CWE-476 · NULL Pointer Dereference (page 37)
Page 37 of 56 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-33458 | Medium | 5.5 | 2022-07-26 | An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in find_cc() in modules/preprocs/nasm/nasm-pp.c. |
CVE-2021-33457 | Medium | 5.5 | 2022-07-26 | An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expand_mmac_params() in modules/preprocs/nasm/nasm-pp.c. |
CVE-2021-33456 | Medium | 5.5 | 2022-07-26 | An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in hash() in modules/preprocs/nasm/nasm-pp.c. |
CVE-2021-33455 | Medium | 5.5 | 2022-07-26 | An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in do_directive() in modules/preprocs/nasm/nasm-pp.c. |
CVE-2021-33454 | Medium | 5.5 | 2022-07-26 | An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in yasm_expr_get_intnum() in libyasm/expr.c. |
CVE-2021-33449 | Medium | 5.5 | 2022-07-26 | An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_bcode_part_get_by_offs… |
CVE-2021-33447 | Medium | 5.5 | 2022-07-26 | An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_print() in mjs.c. |
CVE-2021-33446 | Medium | 5.5 | 2022-07-26 | An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_next() in mjs.c. |
CVE-2021-33445 | Medium | 5.5 | 2022-07-26 | An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_string_char_code_at()… |
CVE-2021-33444 | Medium | 5.5 | 2022-07-26 | An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in getprop_builtin_foreign()… |
CVE-2021-33442 | Medium | 5.5 | 2022-07-26 | An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in json_printf() in mjs.c. |
CVE-2021-33441 | Medium | 5.5 | 2022-07-26 | An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in exec_expr() in mjs.c. |
CVE-2021-33440 | Medium | 5.5 | 2022-07-26 | An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_bcode_commit() in mjs… |
CVE-2021-33439 | Medium | 5.5 | 2022-07-26 | An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is Integer overflow in gc_compact_strings() in mjs.c. |
CVE-2022-1130 | High | 8.1 | 2022-07-23 | Insufficient validation of trust input in WebOTP in Google Chrome on Android prior to 100.0.4896.60 allowed a remote attacker to send arbitrary intents from an… |
CVE-2022-34520 | Medium | 5.5 | 2022-07-22 | Radare2 v5.7.2 was discovered to contain a NULL pointer dereference via the function r_bin_file_xtr_load_buffer at bin/bfile.c. This vulnerability allows attac… |
CVE-2020-36558 | Medium | 5.1 | 2022-07-21 | A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and general protection fault. |
CVE-2022-22210 | Medium | 6.5 | 2022-07-20 | A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on QFX5000 Series and MX Series allows an unauthent… |
CVE-2022-2476 | Medium | 5.5 | 2022-07-19 | A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL ========================================… |
CVE-2022-31213 | High | 7.5 | 2022-07-17 | An issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found when supplying a malformed XML config file. |
CVE-2022-32298 | High | 7.5 | 2022-07-14 | Toybox v0.8.7 was discovered to contain a NULL pointer dereference via the component httpd.c. This vulnerability can lead to a Denial of Service (DoS) via unsp… |
CVE-2022-34761 | High | 7.5 | 2022-07-13 | A CWE-476: NULL Pointer Dereference vulnerability exists that could cause a denial of service of the webserver when parsing JSON content type. Affected Product… |
CVE-2022-34736 | High | 7.5 | 2022-07-12 | The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability. |
CVE-2022-34735 | High | 7.5 | 2022-07-12 | The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability. |
CVE-2022-2309 | High | 7.5 | 2022-07-05 | NULL Pointer Dereference allows attackers to cause a denial of service (or application crash). This only applies when lxml is used together with libxml2 2.9.10… |
CVE-2022-2279 | Medium | 5.5 | 2022-07-01 | NULL Pointer Dereference in GitHub repository bfabiszewski/libmobi prior to 0.11. |
CVE-2022-1852 | Medium | 5.5 | 2022-06-30 | A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in the x86_emulate_insn in arch/x86/kvm/emula… |
CVE-2022-2231 | Medium | 5.5 | 2022-06-28 | NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2. |
CVE-2021-41689 | High | 7.5 | 2022-06-28 | DCMTK through 3.6.6 does not handle string copy properly. Sending specific requests to the dcmqrdb program, it would query its database and copy the result eve… |
CVE-2021-40944 | Medium | 5.5 | 2022-06-28 | In GPAC MP4Box 1.1.0, there is a Null pointer reference in the function gf_filter_pid_get_packet function in src/filter_core/filter_pid.c:5394, as demonstrated… |
CVE-2021-40943 | Medium | 5.5 | 2022-06-28 | In Bento4 1.6.0-638, there is a null pointer reference in the function AP4_DescriptorListInspector::Action function in Ap4Descriptor.h:124 , as demonstrated by… |
CVE-2022-31077 | Medium | 4.0 | 2022-06-27 | KubeEdge is built upon Kubernetes and extends native containerized application orchestration and device management to hosts at the Edge. In affected versions a… |
CVE-2022-31076 | Medium | 4.2 | 2022-06-27 | KubeEdge is built upon Kubernetes and extends native containerized application orchestration and device management to hosts at the Edge. In affected versions a… |
CVE-2022-2208 | Medium | 5.5 | 2022-06-27 | NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163. |
CVE-2022-2121 | High | 7.5 | 2022-06-24 | OFFIS DCMTK's (All versions prior to 3.6.7) has a NULL pointer dereference vulnerability while processing DICOM files, which may result in a denial-of-service… |
CVE-2022-2085 | Medium | 5.5 | 2022-06-16 | A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buf… |
CVE-2022-32230 | High | 7.5 | 2022-06-14 | Microsoft Windows SMBv3 suffers from a null pointer dereference in versions of Windows prior to the April, 2022 patch set. By sending a malformed FileNormalize… |
CVE-2021-35087 | High | 7.5 | 2022-06-14 | Possible null pointer access due to improper validation of system information message to be processed in Snapdragon Industrial IOT, Snapdragon Mobile |
CVE-2021-35076 | High | 7.5 | 2022-06-14 | Possible null pointer dereference due to improper validation of RRC connection reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Conne… |
CVE-2022-31763 | Medium | 5.5 | 2022-06-13 | The kernel module has the null pointer and out-of-bounds array vulnerabilities. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-29224 | Medium | 5.9 | 2022-06-09 | Envoy is a cloud-native high-performance proxy. Versions of envoy prior to 1.22.1 are subject to a segmentation fault in the GrpcHealthCheckerImpl. Envoy can p… |
CVE-2022-32202 | Medium | 5.5 | 2022-06-02 | In libjpeg 1.63, there is a NULL pointer dereference in LineBuffer::FetchRegion in linebuffer.cpp. |
CVE-2022-32201 | Medium | 5.5 | 2022-06-02 | In libjpeg 1.63, there is a NULL pointer dereference in Component::SubXOf in component.hpp. |
CVE-2022-29788 | Medium | 6.5 | 2022-06-02 | libmobi before v0.10 contains a NULL pointer dereference via the component mobi_buffer_getpointer. This vulnerability allows attackers to cause a Denial of Ser… |
CVE-2022-29694 | High | 7.5 | 2022-06-02 | Unicorn Engine v2.0.0-rc7 and below was discovered to contain a NULL pointer dereference via qemu_ram_free. |
CVE-2022-1789 | Medium | 6.8 | 2022-06-02 | With shadow paging enabled, the INVPCID instruction results in a call to kvm_mmu_invpcid_gva. If INVPCID is executed with CR0.PG=0, the invlpg callback is not… |
CVE-2021-42202 | Medium | 5.5 | 2022-06-02 | An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function swf_DeleteFilter() located in swffilter.c. It allows an… |
CVE-2021-42200 | Medium | 5.5 | 2022-06-02 | An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function main() located in swfdump.c. It allows an attacker to c… |
CVE-2021-42198 | Medium | 5.5 | 2022-06-02 | An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function swf_GetBits() located in rfxswf.c. It allows an attacke… |
CVE-2021-42196 | Medium | 5.5 | 2022-06-02 | An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function traits_parse() located in abc.c. It allows an attacker… |
CVE-2021-33254 | High | 7.5 | 2022-06-02 | An issue was discovered in src/http/httpLib.c in EmbedThis Appweb Community Edition 8.2.1, allows attackers to cause a denial of service via the stream paramte… |
CVE-2021-44974 | Medium | 5.5 | 2022-05-25 | radareorg radare2 version 5.5.2 is vulnerable to NULL Pointer Dereference via libr/bin/p/bin_symbols.c binary symbol parser. |
CVE-2022-29206 | Medium | 5.5 | 2022-05-20 | TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.SparseTensorDen… |
CVE-2022-29205 | Medium | 5.5 | 2022-05-20 | TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, there is a potential for segfault / denial of ser… |
CVE-2022-29201 | Medium | 5.5 | 2022-05-20 | TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.QuantizedConv2D… |
CVE-2022-29031 | Medium | 5.5 | 2022-05-20 | A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visualization V1… |
CVE-2022-29029 | Medium | 5.5 | 2022-05-20 | A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visualization V1… |
CVE-2021-27548 | Medium | 5.5 | 2022-05-18 | There is a Null Pointer Dereference vulnerability in the XFAScanner::scanNode() function in XFAScanner.cc in xpdf 4.03. |
CVE-2022-30975 | Medium | 5.5 | 2022-05-18 | In Artifex MuJS through 1.2.0, jsP_dumpsyntax in jsdump.c has a NULL pointer dereference, as demonstrated by mujs-pp. |
CVE-2022-28189 | Medium | 5.5 | 2022-05-17 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a NULL pointer derefere… |
CVE-2022-29795 | High | 7.5 | 2022-05-13 | The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability. |
CVE-2022-30279 | High | 7.5 | 2022-05-12 | An issue was discovered in Stormshield Network Security (SNS) 4.3.x before 4.3.8. The event logging of the ASQ sofbus lacbus plugin triggers the dereferencing… |
CVE-2022-1674 | Medium | 5.5 | 2022-05-12 | NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function v… |
CVE-2022-30592 | Critical | 9.8 | 2022-05-11 | liblsquic/lsquic_qenc_hdl.c in LiteSpeed QUIC (aka LSQUIC) before 3.1.0 mishandles MAX_TABLE_CAPACITY. |
CVE-2021-36614 | Medium | 6.5 | 2022-05-11 | Mikrotik RouterOs before stable 6.48.2 suffers from a memory corruption vulnerability in the tr069-client process. An authenticated remote attacker can cause a… |
CVE-2021-36613 | Medium | 6.5 | 2022-05-11 | Mikrotik RouterOs before stable 6.48.2 suffers from a memory corruption vulnerability in the ptp process. An authenticated remote attacker can cause a Denial o… |
CVE-2021-33317 | High | 7.5 | 2022-05-11 | The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suffers from a null pointer dereference vulnerability. This vulnerability exists in its lldp… |
CVE-2022-1649 | Medium | 5.5 | 2022-05-10 | Null pointer dereference in libr/bin/format/mach0/mach0.c in radareorg/radare2 in GitHub repository radareorg/radare2 prior to 5.7.0. It is likely to be exploi… |
CVE-2022-1620 | High | 7.5 | 2022-05-08 | NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901. NULL Pointer Dereference in function v… |
CVE-2022-27359 | Medium | 5.5 | 2022-05-05 | Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow a this.maildoc NULL pointer dereference. |
CVE-2022-29491 | High | 7.5 | 2022-05-05 | On F5 BIG-IP LTM, Advanced WAF, ASM, or APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, 14.1.x versions prior to 14.1.4.6, and all vers… |
CVE-2022-1516 | Medium | 5.5 | 2022-05-05 | A NULL pointer dereference flaw was found in the Linux kernel’s X.25 set of standardized network protocols functionality in the way a user terminates their ses… |
CVE-2022-29340 | High | 7.5 | 2022-05-05 | GPAC 2.1-DEV-rev87-g053aae8-master. has a Null Pointer Dereference vulnerability in gf_isom_parse_movie_boxes_internal due to improper return value handling of… |
CVE-2022-20796 | Medium | 6.5 | 2022-05-04 | On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability… |
CVE-2022-20746 | High | 8.6 | 2022-05-03 | A vulnerability in the TCP proxy functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a de… |
CVE-2021-42528 | Medium | 5.5 | 2022-05-02 | XMP Toolkit 2021.07 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker co… |
CVE-2022-1249 | Low | 3.3 | 2022-04-29 | A NULL pointer dereference flaw was found in pesign's cms_set_pw_data() function of the cms_common.c file. The function fails to handle the NULL pwdata invocat… |
CVE-2022-24736 | Low | 3.3 | 2022-04-27 | Redis is an in-memory database that persists on disk. Prior to versions 6.2.7 and 7.0.0, an attacker attempting to load a specially crafted Lua script can caus… |
CVE-2022-1507 | Medium | 5.5 | 2022-04-27 | chafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a denial of service (crash) via a crafted inp… |
CVE-2022-1341 | High | 7.5 | 2022-04-18 | An issue was discovered in in bwm-ng v0.6.2. An arbitrary null write exists in get_cmdln_options() function in src/options.c. |
CVE-2022-1382 | Medium | 5.5 | 2022-04-18 | NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of making the radare2 crash, thus affecting the a… |
CVE-2021-44508 | High | 7.5 | 2022-04-15 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of NULL checks in calls to ious_open in sr_unix/ious_open.c all… |
CVE-2021-44507 | High | 7.5 | 2022-04-15 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of parameter validation in calls to memcpy in str_tok in sr_uni… |
CVE-2021-44506 | High | 7.5 | 2022-04-15 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of input validation in calls to do_verify in sr_unix/do_verify… |
CVE-2021-44505 | High | 7.5 | 2022-04-15 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a NULL pointer dereference… |
CVE-2021-44501 | High | 7.5 | 2022-04-15 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause calls to ZRead to crash due… |
CVE-2021-44498 | High | 7.5 | 2022-04-15 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, attackers can cause a type to be incorrectly init… |
CVE-2021-44495 | High | 7.5 | 2022-04-15 | An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a NULL pointer derefere… |
CVE-2021-44494 | High | 7.5 | 2022-04-15 | An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause calls to ZRead to crash… |
CVE-2021-44492 | High | 7.5 | 2022-04-15 | An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, attackers can cause a type to be incorrectly… |
CVE-2021-44487 | High | 7.5 | 2022-04-15 | An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in calls to ious_open in sr_unix/ious_open.c allows attackers to crash the… |
CVE-2021-44485 | High | 7.5 | 2022-04-15 | An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in trip_gen in sr_port/emit_code.c allows attackers to crash the applicati… |
CVE-2021-44484 | High | 7.5 | 2022-04-15 | An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in calls to emit_trip in sr_port/emit_code.c allows attackers to crash the… |
CVE-2022-20682 | High | 8.6 | 2022-04-15 | A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Wireless Controller Software for the Cat… |
CVE-2022-28049 | Medium | 5.5 | 2022-04-15 | NGINX NJS 0.7.2 was discovered to contain a NULL pointer dereference via the component njs_vmcode_array at /src/njs_vmcode.c. |
CVE-2021-39804 | Medium | 6.5 | 2022-04-12 | In reinit of HeifDecoderImpl.cpp, there is a possible crash due to a missing null check. This could lead to remote persistent denial of service in the file pic… |
CVE-2022-27567 | Medium | 5.9 | 2022-04-11 | Null pointer dereference vulnerability in parser_hvcC function of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacke… |
CVE-2022-26099 | Medium | 5.9 | 2022-04-11 | Null pointer dereference vulnerability in parser_infe function of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds read by remote attacker… |
CVE-2022-26097 | Medium | 5.9 | 2022-04-11 | Null pointer dereference vulnerability in parser_unknown_property function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by re… |
CVE-2022-26096 | Medium | 5.9 | 2022-04-11 | Null pointer dereference vulnerability in parser_ispe function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacke… |