CWE-476 · NULL Pointer Dereference (page 38)
Page 38 of 56 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-26095 | Medium | 5.9 | 2022-04-11 | Null pointer dereference vulnerability in parser_colr function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacke… |
CVE-2022-26094 | Medium | 5.9 | 2022-04-11 | Null pointer dereference vulnerability in parser_auxC function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacke… |
CVE-2022-26093 | Medium | 5.9 | 2022-04-11 | Null pointer dereference vulnerability in parser_irot function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacke… |
CVE-2022-1283 | Medium | 5.5 | 2022-04-08 | NULL Pointer Dereference in r_bin_ne_get_entrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability allows attackers to cau… |
CVE-2022-22513 | Medium | 6.5 | 2022-04-07 | An authenticated remote attacker can cause a null pointer dereference in the CmpSettings component of the affected CODESYS products which leads to a crash. |
CVE-2021-44108 | High | 7.5 | 2022-04-05 | A null pointer dereference in src/amf/namf-handler.c in Open5GS 2.3.6 and earlier allows remote attackers to Denial of Service via a crafted sbi request to amf. |
CVE-2022-1201 | Medium | 6.5 | 2022-04-02 | NULL Pointer Dereference in mrb_vm_exec with super in GitHub repository mruby/mruby prior to 3.2. This vulnerability is capable of making the mruby interpreter… |
CVE-2022-1172 | Medium | 5.0 | 2022-03-30 | Null Pointer Dereference Caused Segmentation Fault in GitHub repository gpac/gpac prior to 2.1.0-DEV. |
CVE-2021-45117 | Medium | 6.5 | 2022-03-21 | The OPC autogenerated ANSI C stack stubs (in the NodeSets) do not handle all error cases. This can lead to a NULL pointer dereference. |
CVE-2022-1035 | Medium | 5.5 | 2022-03-21 | Segmentation Fault caused by MP4Box -lsr in GitHub repository gpac/gpac prior to 2.1.0-DEV. |
CVE-2022-22638 | Medium | 6.5 | 2022-03-18 | A null pointer dereference was addressed with improved validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, Security U… |
CVE-2021-42264 | Medium | 5.5 | 2022-03-16 | Adobe Premiere Pro 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attac… |
CVE-2021-42263 | Medium | 5.5 | 2022-03-16 | Adobe Premiere Pro 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attac… |
CVE-2021-40796 | Medium | 5.5 | 2022-03-16 | Adobe Premiere Pro 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attac… |
CVE-2021-40789 | Medium | 5.5 | 2022-03-16 | Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An… |
CVE-2021-40788 | Medium | 5.5 | 2022-03-16 | Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An… |
CVE-2021-40785 | Medium | 5.5 | 2022-03-16 | Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An… |
CVE-2021-40782 | Medium | 5.5 | 2022-03-16 | Adobe Media Encoder 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated atta… |
CVE-2021-40781 | Medium | 5.5 | 2022-03-16 | Adobe Media Encoder 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated atta… |
CVE-2021-40778 | Medium | 5.5 | 2022-03-16 | Adobe Media Encoder 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated atta… |
CVE-2021-40768 | Medium | 5.5 | 2022-03-16 | Adobe Character Animator version 4.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenti… |
CVE-2021-40762 | Medium | 5.5 | 2022-03-16 | Adobe Character Animator version 4.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenti… |
CVE-2021-40750 | Medium | 5.5 | 2022-03-16 | Adobe Bridge version 11.1.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated att… |
CVE-2021-40742 | Medium | 5.5 | 2022-03-16 | Adobe Audition version 14.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated att… |
CVE-2021-40737 | Medium | 5.5 | 2022-03-16 | Adobe Audition version 14.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated att… |
CVE-2021-20299 | High | 7.5 | 2022-03-16 | A flaw was found in OpenEXR's Multipart input file functionality. A crafted multi-part input file with no actual parts can trigger a NULL pointer dereference… |
CVE-2022-24577 | High | 7.8 | 2022-03-14 | GPAC 1.0.1 is affected by a NULL pointer dereference in gf_utf8_wcslen. (gf_utf8_wcslen is a renamed Unicode utf8_wcslen function.) |
CVE-2022-24574 | Medium | 5.5 | 2022-03-14 | GPAC 1.0.1 is affected by a NULL pointer dereference in gf_dump_vrml_field.isra (). |
CVE-2021-42577 | High | 7.5 | 2022-03-11 | An issue was discovered in Softing OPC UA C++ SDK before 5.70. A malformed OPC/UA message abort packet makes the client crash with a NULL pointer dereference. |
CVE-2022-0908 | High | 7.7 | 2022-03-11 | Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff versions up to 4.3.0 could lead to Deni… |
CVE-2022-25108 | Medium | 5.5 | 2022-03-10 | Foxit PDF Reader and Editor before 11.2.1 and PhantomPDF before 10.1.7 allow a NULL pointer dereference during PDF parsing because the pointer is used without… |
CVE-2022-0433 | Medium | 5.5 | 2022-03-10 | A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the map_get_next_key function of the BPF bloom filter… |
CVE-2021-4095 | Medium | 5.5 | 2022-03-10 | A NULL pointer dereference was found in the Linux kernel's KVM when dirty ring logging is enabled without an active vCPU context. An unprivileged local attacke… |
CVE-2021-3739 | High | 7.1 | 2022-03-10 | A NULL pointer dereference flaw was found in the btrfs_rm_device function in fs/btrfs/volumes.c in the Linux Kernel, where triggering the bug requires ‘CAP_SYS… |
CVE-2021-34122 | Medium | 5.5 | 2022-03-10 | The function bitstr_tell at bitstr.c in ffjpeg commit 4ab404e has a NULL pointer dereference. |
CVE-2022-0890 | Medium | 5.5 | 2022-03-10 | NULL Pointer Dereference in GitHub repository mruby/mruby prior to 3.2. |
CVE-2021-4198 | Medium | 6.1 | 2022-03-07 | A NULL Pointer Dereference vulnerability in the messaging_ipc.dll component as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint… |
CVE-2021-26948 | High | 7.8 | 2022-03-03 | Null pointer dereference in the htmldoc v1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of service via a crafted html file. |
CVE-2021-23191 | High | 7.8 | 2022-03-02 | A security issue was found in htmldoc v1.9.12 and before. A NULL pointer dereference in the function image_load_jpeg() in image.cxx may result in denial of ser… |
CVE-2021-23180 | High | 7.8 | 2022-03-02 | A flaw was found in htmldoc in v1.9.12 and before. Null pointer dereference in file_extension(),in file.c may lead to execute arbitrary code and denial of serv… |
CVE-2021-3596 | Medium | 6.5 | 2022-02-24 | A NULL pointer dereference flaw was found in ImageMagick in versions prior to 7.0.10-31 in ReadSVGImage() in coders/svg.c. This issue is due to not checking th… |
CVE-2021-43824 | High | 7.5 | 2022-02-22 | Envoy is an open source edge and service proxy, designed for cloud-native applications. In affected versions a crafted request crashes Envoy when a CONNECT req… |
CVE-2022-0712 | Medium | 5.5 | 2022-02-22 | NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.4. |
CVE-2022-0696 | Medium | 5.5 | 2022-02-21 | NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4428. |
CVE-2022-0632 | Medium | 5.5 | 2022-02-19 | NULL Pointer Dereference in Homebrew mruby prior to 3.2. |
CVE-2022-25258 | Medium | 4.6 | 2022-02-16 | An issue was discovered in drivers/usb/gadget/composite.c in the Linux kernel before 5.16.10. The USB Gadget subsystem lacks certain validation of interface OS… |
CVE-2022-23199 | Medium | 5.5 | 2022-02-16 | Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker… |
CVE-2022-23198 | Medium | 5.5 | 2022-02-16 | Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker… |
CVE-2022-23189 | Medium | 5.5 | 2022-02-16 | Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker… |
CVE-2022-0617 | Medium | 5.5 | 2022-02-16 | A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers udf_file_write_iter function for the malic… |
CVE-2021-44960 | Medium | 6.5 | 2022-02-15 | In SVGPP SVG++ library 1.3.0, the XMLDocument::getRoot function in the renderDocument function handled the XMLDocument object improperly, returning a null poin… |
CVE-2022-0582 | Medium | 6.3 | 2022-02-14 | Unaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted captu… |
CVE-2021-44879 | Medium | 5.5 | 2022-02-14 | In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL pointer dereference. |
CVE-2022-0562 | Medium | 5.5 | 2022-02-11 | Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tif_dirread.c in libtiff versions from 4.0 to 4.3.0 could lead to… |
CVE-2022-0561 | Medium | 5.5 | 2022-02-11 | Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead… |
CVE-2021-45385 | Medium | 6.5 | 2022-02-11 | A Null Pointer Dereference vulnerability exits in ffjpeg d5cfd49 (2021-12-06) in bmp_load(). When the size information in metadata of the bmp is out of range… |
CVE-2021-35075 | High | 8.4 | 2022-02-11 | Possible null pointer dereference due to lack of WDOG structure validation during registration in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industri… |
CVE-2021-35068 | High | 8.4 | 2022-02-11 | Lack of null check while freeing the device information buffer in the Bluetooth HFP protocol can lead to a NULL pointer dereference in Snapdragon Auto, Snapdra… |
CVE-2021-33068 | Medium | 6.5 | 2022-02-09 | Null pointer dereference in subsystem for Intel(R) AMT before versions 15.0.35 may allow an authenticated user to potentially enable denial of service via netw… |
CVE-2021-0111 | Medium | 6.7 | 2022-02-09 | NULL pointer dereference in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local ac… |
CVE-2022-21815 | Medium | 5.5 | 2022-02-07 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for private IOCTLs where a NULL pointer derefere… |
CVE-2022-23595 | Medium | 5.3 | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. When building an XLA compilation cache, if default settings are used, TensorFlow triggers a null point… |
CVE-2022-23589 | Medium | 6.5 | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, Grappler component of TensorFlow can trigger a null pointer dereference. Ther… |
CVE-2022-23577 | Medium | 6.5 | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. The implementation of `GetInitOp` is vulnerable to a crash caused by dereferencing a null pointer. The… |
CVE-2022-23570 | Medium | 6.5 | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. When decoding a tensor from protobuf, TensorFlow might do a null-dereference if attributes of some mut… |
CVE-2022-0481 | High | 7.5 | 2022-02-04 | NULL Pointer Dereference in Homebrew mruby prior to 3.2. |
CVE-2021-4043 | Medium | 5.5 | 2022-02-04 | NULL Pointer Dereference in GitHub repository gpac/gpac prior to 1.1.0. |
CVE-2022-24249 | Medium | 5.5 | 2022-02-04 | A Null Pointer Dereference vulnerability exists in GPAC 1.1.0 via the xtra_box_write function in /box_code_base.c, which causes a Denial of Service. This vulne… |
CVE-2022-21739 | Medium | 6.5 | 2022-02-03 | Tensorflow is an Open Source Machine Learning Framework. The implementation of `QuantizedMaxPool` has an undefined behavior where user controlled inputs can tr… |
CVE-2022-21736 | High | 7.6 | 2022-02-03 | Tensorflow is an Open Source Machine Learning Framework. The implementation of `SparseTensorSliceDataset` has an undefined behavior: under certain condition it… |
CVE-2022-22510 | High | 7.5 | 2022-02-02 | Codesys Profinet in version V4.2.0.0 is prone to null pointer dereference that allows a denial of service (DoS) attack of an unauthenticated user via SNMP. |
CVE-2022-0419 | Medium | 5.5 | 2022-02-01 | NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.0. |
CVE-2021-46664 | Medium | 5.5 | 2022-02-01 | MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr. |
CVE-2022-0286 | Medium | 5.5 | 2022-01-31 | A flaw was found in the Linux kernel. A null pointer dereference in bond_ipsec_add_sa() may lead to local denial of service. |
CVE-2021-45079 | Critical | 9.1 | 2022-01-31 | In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP… |
CVE-2021-22570 | Medium | 6.5 | 2022-01-26 | Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name du… |
CVE-2022-23025 | High | 7.5 | 2022-01-25 | On BIG-IP version 16.1.x before 16.1.1, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, when a SIP ALG profile is configured on a vir… |
CVE-2022-23022 | High | 7.5 | 2022-01-25 | On BIG-IP version 16.1.x before 16.1.2, when an HTTP profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkern… |
CVE-2022-23021 | High | 7.5 | 2022-01-25 | On BIG-IP version 16.1.x before 16.1.2, when any of the following configurations are configured on a virtual server, undisclosed requests can cause the Traffic… |
CVE-2022-23020 | High | 7.5 | 2022-01-25 | On BIG-IP version 16.1.x before 16.1.2, when the 'Respond on Error' setting is enabled on the Request Logging profile and configured on a virtual server, undis… |
CVE-2022-23017 | High | 7.5 | 2022-01-25 | On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x, when a virtual server is configured with a DN… |
CVE-2022-23016 | High | 7.5 | 2022-01-25 | On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP SSL Forward Proxy with TLS 1.3 is configured on a virtual server, undisclosed requests… |
CVE-2021-4145 | Medium | 6.5 | 2022-01-25 | A NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to 6.2.0. The `self` pointer is dereferenced in mirror_wait_on_c… |
CVE-2021-45847 | Medium | 5.5 | 2022-01-25 | Several missing input validations in the 3MF parser component of Slic3r libslic3r 1.3.0 can each allow an attacker to cause an application crash using a crafte… |
CVE-2021-45846 | Medium | 5.5 | 2022-01-25 | A flaw in the AMF parser of Slic3r libslic3r 1.3.0 allows an attacker to cause an application crash using a crafted AMF document, where a metadata tag lacks a… |
CVE-2021-45343 | Medium | 5.5 | 2022-01-25 | In LibreCAD 2.2.0, a NULL pointer dereference in the HATCH handling of libdxfrw allows an attacker to crash the application using a crafted DXF document. |
CVE-2021-45340 | Medium | 6.5 | 2022-01-25 | In Libsixel prior to and including v1.10.3, a NULL pointer dereference in the stb_image.h component of libsixel allows attackers to cause a denial of service (… |
CVE-2021-46311 | Medium | 5.5 | 2022-01-21 | A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_sg_destroy_routes () at scenegraph/vrml_route.c. This vulnerability can lead… |
CVE-2021-46243 | Medium | 6.5 | 2022-01-21 | An untrusted pointer dereference vulnerability exists in HDF5 v1.13.1-1 via the function H5O__dtype_decode_helper () at hdf5/src/H5Odtype.c. This vulnerability… |
CVE-2021-46240 | Medium | 5.5 | 2022-01-21 | A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_dump_vrml_sffield () at scene_manager/scene_dump.c. This vulnerability can l… |
CVE-2021-46237 | Medium | 5.5 | 2022-01-21 | An untrusted pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_node_unregister () at scenegraph/base_scenegraph.c. This vulnerability… |
CVE-2021-46236 | Medium | 5.5 | 2022-01-21 | A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_sg_vrml_field_pointer_del () at scenegraph/vrml_tools.c. This vulnerability… |
CVE-2021-46234 | Medium | 5.5 | 2022-01-21 | A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_node_unregister () at scenegraph/base_scenegraph.c. This vulnerability can l… |
CVE-2022-0326 | Medium | 5.5 | 2022-01-21 | NULL Pointer Dereference in Homebrew mruby prior to 3.2. |
CVE-2021-46335 | Medium | 5.5 | 2022-01-20 | Moddable SDK v11.5.0 was discovered to contain a NULL pointer dereference in the component fx_Function_prototype_hasInstance. |
CVE-2021-38786 | High | 7.5 | 2022-01-19 | There is a NULL pointer dereference in media/libcedarc/vdecoder of Allwinner R818 SoC Android Q SDK V1.0, which could cause a media crash (denial of service). |
CVE-2021-34406 | Medium | 4.7 | 2022-01-18 | NVIDIA Tegra kernel driver contains a vulnerability in NVHost, where a specific race condition can lead to a null pointer dereference, which may lead to a syst… |
CVE-2021-38785 | High | 7.5 | 2022-01-18 | There is a NULL pointer deference in the Allwinner R818 SoC Android Q SDK V1.0 camera driver /dev/cedar_dev that could use the ioctl cmd IOCTL_GET_IOMMU_ADDR t… |
CVE-2021-38784 | High | 7.5 | 2022-01-18 | There is a NULL pointer dereference in the syscall open_exec function of Allwinner R818 SoC Android Q SDK V1.0 that could executable a malicious file to cause… |
CVE-2022-0240 | High | 7.5 | 2022-01-17 | mruby is vulnerable to NULL Pointer Dereference |