CWE-476 · NULL Pointer Dereference (page 39)
Page 39 of 57 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-31077 | Medium | 4.0 | 2022-06-27 | KubeEdge is built upon Kubernetes and extends native containerized application orchestration and device management to hosts at the Edge. In affected versions a… |
CVE-2022-31076 | Medium | 4.2 | 2022-06-27 | KubeEdge is built upon Kubernetes and extends native containerized application orchestration and device management to hosts at the Edge. In affected versions a… |
CVE-2022-2208 | Medium | 5.5 | 2022-06-27 | NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163. |
CVE-2022-2121 | High | 7.5 | 2022-06-24 | OFFIS DCMTK's (All versions prior to 3.6.7) has a NULL pointer dereference vulnerability while processing DICOM files, which may result in a denial-of-service… |
CVE-2022-2085 | Medium | 5.5 | 2022-06-16 | A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buf… |
CVE-2022-32230 | High | 7.5 | 2022-06-14 | Microsoft Windows SMBv3 suffers from a null pointer dereference in versions of Windows prior to the April, 2022 patch set. By sending a malformed FileNormalize… |
CVE-2021-35087 | High | 7.5 | 2022-06-14 | Possible null pointer access due to improper validation of system information message to be processed in Snapdragon Industrial IOT, Snapdragon Mobile |
CVE-2021-35076 | High | 7.5 | 2022-06-14 | Possible null pointer dereference due to improper validation of RRC connection reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Conne… |
CVE-2022-31763 | Medium | 5.5 | 2022-06-13 | The kernel module has the null pointer and out-of-bounds array vulnerabilities. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-29224 | Medium | 5.9 | 2022-06-09 | Envoy is a cloud-native high-performance proxy. Versions of envoy prior to 1.22.1 are subject to a segmentation fault in the GrpcHealthCheckerImpl. Envoy can p… |
CVE-2022-32202 | Medium | 5.5 | 2022-06-02 | In libjpeg 1.63, there is a NULL pointer dereference in LineBuffer::FetchRegion in linebuffer.cpp. |
CVE-2022-32201 | Medium | 5.5 | 2022-06-02 | In libjpeg 1.63, there is a NULL pointer dereference in Component::SubXOf in component.hpp. |
CVE-2022-29788 | Medium | 6.5 | 2022-06-02 | libmobi before v0.10 contains a NULL pointer dereference via the component mobi_buffer_getpointer. This vulnerability allows attackers to cause a Denial of Ser… |
CVE-2022-29694 | High | 7.5 | 2022-06-02 | Unicorn Engine v2.0.0-rc7 and below was discovered to contain a NULL pointer dereference via qemu_ram_free. |
CVE-2022-1789 | Medium | 6.8 | 2022-06-02 | With shadow paging enabled, the INVPCID instruction results in a call to kvm_mmu_invpcid_gva. If INVPCID is executed with CR0.PG=0, the invlpg callback is not… |
CVE-2021-42202 | Medium | 5.5 | 2022-06-02 | An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function swf_DeleteFilter() located in swffilter.c. It allows an… |
CVE-2021-42200 | Medium | 5.5 | 2022-06-02 | An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function main() located in swfdump.c. It allows an attacker to c… |
CVE-2021-42198 | Medium | 5.5 | 2022-06-02 | An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function swf_GetBits() located in rfxswf.c. It allows an attacke… |
CVE-2021-42196 | Medium | 5.5 | 2022-06-02 | An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function traits_parse() located in abc.c. It allows an attacker… |
CVE-2021-33254 | High | 7.5 | 2022-06-02 | An issue was discovered in src/http/httpLib.c in EmbedThis Appweb Community Edition 8.2.1, allows attackers to cause a denial of service via the stream paramte… |
CVE-2021-44974 | Medium | 5.5 | 2022-05-25 | radareorg radare2 version 5.5.2 is vulnerable to NULL Pointer Dereference via libr/bin/p/bin_symbols.c binary symbol parser. |
CVE-2022-29206 | Medium | 5.5 | 2022-05-20 | TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.SparseTensorDen… |
CVE-2022-29205 | Medium | 5.5 | 2022-05-20 | TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, there is a potential for segfault / denial of ser… |
CVE-2022-29201 | Medium | 5.5 | 2022-05-20 | TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.QuantizedConv2D… |
CVE-2022-29031 | Medium | 5.5 | 2022-05-20 | A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visualization V1… |
CVE-2022-29029 | Medium | 5.5 | 2022-05-20 | A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visualization V1… |
CVE-2021-27548 | Medium | 5.5 | 2022-05-18 | There is a Null Pointer Dereference vulnerability in the XFAScanner::scanNode() function in XFAScanner.cc in xpdf 4.03. |
CVE-2022-30975 | Medium | 5.5 | 2022-05-18 | In Artifex MuJS through 1.2.0, jsP_dumpsyntax in jsdump.c has a NULL pointer dereference, as demonstrated by mujs-pp. |
CVE-2022-28189 | Medium | 5.5 | 2022-05-17 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a NULL pointer derefere… |
CVE-2022-29795 | High | 7.5 | 2022-05-13 | The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability. |
CVE-2022-30279 | High | 7.5 | 2022-05-12 | An issue was discovered in Stormshield Network Security (SNS) 4.3.x before 4.3.8. The event logging of the ASQ sofbus lacbus plugin triggers the dereferencing… |
CVE-2022-1674 | Medium | 5.5 | 2022-05-12 | NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function v… |
CVE-2022-30592 | Critical | 9.8 | 2022-05-11 | liblsquic/lsquic_qenc_hdl.c in LiteSpeed QUIC (aka LSQUIC) before 3.1.0 mishandles MAX_TABLE_CAPACITY. |
CVE-2021-36614 | Medium | 6.5 | 2022-05-11 | Mikrotik RouterOs before stable 6.48.2 suffers from a memory corruption vulnerability in the tr069-client process. An authenticated remote attacker can cause a… |
CVE-2021-36613 | Medium | 6.5 | 2022-05-11 | Mikrotik RouterOs before stable 6.48.2 suffers from a memory corruption vulnerability in the ptp process. An authenticated remote attacker can cause a Denial o… |
CVE-2021-33317 | High | 7.5 | 2022-05-11 | The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suffers from a null pointer dereference vulnerability. This vulnerability exists in its lldp… |
CVE-2022-1649 | Medium | 5.5 | 2022-05-10 | Null pointer dereference in libr/bin/format/mach0/mach0.c in radareorg/radare2 in GitHub repository radareorg/radare2 prior to 5.7.0. It is likely to be exploi… |
CVE-2022-1620 | High | 7.5 | 2022-05-08 | NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901. NULL Pointer Dereference in function v… |
CVE-2022-27359 | Medium | 5.5 | 2022-05-05 | Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow a this.maildoc NULL pointer dereference. |
CVE-2022-29491 | High | 7.5 | 2022-05-05 | On F5 BIG-IP LTM, Advanced WAF, ASM, or APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, 14.1.x versions prior to 14.1.4.6, and all vers… |
CVE-2022-1516 | Medium | 5.5 | 2022-05-05 | A NULL pointer dereference flaw was found in the Linux kernel’s X.25 set of standardized network protocols functionality in the way a user terminates their ses… |
CVE-2022-29340 | High | 7.5 | 2022-05-05 | GPAC 2.1-DEV-rev87-g053aae8-master. has a Null Pointer Dereference vulnerability in gf_isom_parse_movie_boxes_internal due to improper return value handling of… |
CVE-2022-20796 | Medium | 6.5 | 2022-05-04 | On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability… |
CVE-2022-20746 | High | 8.6 | 2022-05-03 | A vulnerability in the TCP proxy functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a de… |
CVE-2021-42528 | Medium | 5.5 | 2022-05-02 | XMP Toolkit 2021.07 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker co… |
CVE-2022-1249 | Low | 3.3 | 2022-04-29 | A NULL pointer dereference flaw was found in pesign's cms_set_pw_data() function of the cms_common.c file. The function fails to handle the NULL pwdata invocat… |
CVE-2022-24736 | Low | 3.3 | 2022-04-27 | Redis is an in-memory database that persists on disk. Prior to versions 6.2.7 and 7.0.0, an attacker attempting to load a specially crafted Lua script can caus… |
CVE-2022-1507 | Medium | 5.5 | 2022-04-27 | chafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a denial of service (crash) via a crafted inp… |
CVE-2022-1341 | High | 7.5 | 2022-04-18 | An issue was discovered in in bwm-ng v0.6.2. An arbitrary null write exists in get_cmdln_options() function in src/options.c. |
CVE-2022-1382 | Medium | 5.5 | 2022-04-18 | NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of making the radare2 crash, thus affecting the a… |
CVE-2021-44508 | High | 7.5 | 2022-04-15 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of NULL checks in calls to ious_open in sr_unix/ious_open.c all… |
CVE-2021-44507 | High | 7.5 | 2022-04-15 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of parameter validation in calls to memcpy in str_tok in sr_uni… |
CVE-2021-44506 | High | 7.5 | 2022-04-15 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of input validation in calls to do_verify in sr_unix/do_verify… |
CVE-2021-44505 | High | 7.5 | 2022-04-15 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a NULL pointer dereference… |
CVE-2021-44501 | High | 7.5 | 2022-04-15 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause calls to ZRead to crash due… |
CVE-2021-44498 | High | 7.5 | 2022-04-15 | An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, attackers can cause a type to be incorrectly init… |
CVE-2021-44495 | High | 7.5 | 2022-04-15 | An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a NULL pointer derefere… |
CVE-2021-44494 | High | 7.5 | 2022-04-15 | An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause calls to ZRead to crash… |
CVE-2021-44492 | High | 7.5 | 2022-04-15 | An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, attackers can cause a type to be incorrectly… |
CVE-2021-44487 | High | 7.5 | 2022-04-15 | An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in calls to ious_open in sr_unix/ious_open.c allows attackers to crash the… |
CVE-2021-44485 | High | 7.5 | 2022-04-15 | An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in trip_gen in sr_port/emit_code.c allows attackers to crash the applicati… |
CVE-2021-44484 | High | 7.5 | 2022-04-15 | An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in calls to emit_trip in sr_port/emit_code.c allows attackers to crash the… |
CVE-2022-20682 | High | 8.6 | 2022-04-15 | A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Wireless Controller Software for the Cat… |
CVE-2022-28049 | Medium | 5.5 | 2022-04-15 | NGINX NJS 0.7.2 was discovered to contain a NULL pointer dereference via the component njs_vmcode_array at /src/njs_vmcode.c. |
CVE-2021-39804 | Medium | 6.5 | 2022-04-12 | In reinit of HeifDecoderImpl.cpp, there is a possible crash due to a missing null check. This could lead to remote persistent denial of service in the file pic… |
CVE-2022-27567 | Medium | 5.9 | 2022-04-11 | Null pointer dereference vulnerability in parser_hvcC function of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacke… |
CVE-2022-26099 | Medium | 5.9 | 2022-04-11 | Null pointer dereference vulnerability in parser_infe function of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds read by remote attacker… |
CVE-2022-26097 | Medium | 5.9 | 2022-04-11 | Null pointer dereference vulnerability in parser_unknown_property function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by re… |
CVE-2022-26096 | Medium | 5.9 | 2022-04-11 | Null pointer dereference vulnerability in parser_ispe function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacke… |
CVE-2022-26095 | Medium | 5.9 | 2022-04-11 | Null pointer dereference vulnerability in parser_colr function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacke… |
CVE-2022-26094 | Medium | 5.9 | 2022-04-11 | Null pointer dereference vulnerability in parser_auxC function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacke… |
CVE-2022-26093 | Medium | 5.9 | 2022-04-11 | Null pointer dereference vulnerability in parser_irot function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacke… |
CVE-2022-1283 | Medium | 5.5 | 2022-04-08 | NULL Pointer Dereference in r_bin_ne_get_entrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability allows attackers to cau… |
CVE-2022-22513 | Medium | 6.5 | 2022-04-07 | An authenticated remote attacker can cause a null pointer dereference in the CmpSettings component of the affected CODESYS products which leads to a crash. |
CVE-2021-44108 | High | 7.5 | 2022-04-05 | A null pointer dereference in src/amf/namf-handler.c in Open5GS 2.3.6 and earlier allows remote attackers to Denial of Service via a crafted sbi request to amf. |
CVE-2022-1201 | Medium | 6.5 | 2022-04-02 | NULL Pointer Dereference in mrb_vm_exec with super in GitHub repository mruby/mruby prior to 3.2. This vulnerability is capable of making the mruby interpreter… |
CVE-2022-1172 | Medium | 5.0 | 2022-03-30 | Null Pointer Dereference Caused Segmentation Fault in GitHub repository gpac/gpac prior to 2.1.0-DEV. |
CVE-2021-45117 | Medium | 6.5 | 2022-03-21 | The OPC autogenerated ANSI C stack stubs (in the NodeSets) do not handle all error cases. This can lead to a NULL pointer dereference. |
CVE-2022-1035 | Medium | 5.5 | 2022-03-21 | Segmentation Fault caused by MP4Box -lsr in GitHub repository gpac/gpac prior to 2.1.0-DEV. |
CVE-2022-22638 | Medium | 6.5 | 2022-03-18 | A null pointer dereference was addressed with improved validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, Security U… |
CVE-2021-42264 | Medium | 5.5 | 2022-03-16 | Adobe Premiere Pro 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attac… |
CVE-2021-42263 | Medium | 5.5 | 2022-03-16 | Adobe Premiere Pro 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attac… |
CVE-2021-40796 | Medium | 5.5 | 2022-03-16 | Adobe Premiere Pro 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attac… |
CVE-2021-40789 | Medium | 5.5 | 2022-03-16 | Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An… |
CVE-2021-40788 | Medium | 5.5 | 2022-03-16 | Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An… |
CVE-2021-40785 | Medium | 5.5 | 2022-03-16 | Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An… |
CVE-2021-40782 | Medium | 5.5 | 2022-03-16 | Adobe Media Encoder 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated atta… |
CVE-2021-40781 | Medium | 5.5 | 2022-03-16 | Adobe Media Encoder 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated atta… |
CVE-2021-40778 | Medium | 5.5 | 2022-03-16 | Adobe Media Encoder 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated atta… |
CVE-2021-40768 | Medium | 5.5 | 2022-03-16 | Adobe Character Animator version 4.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenti… |
CVE-2021-40762 | Medium | 5.5 | 2022-03-16 | Adobe Character Animator version 4.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenti… |
CVE-2021-40750 | Medium | 5.5 | 2022-03-16 | Adobe Bridge version 11.1.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated att… |
CVE-2021-40742 | Medium | 5.5 | 2022-03-16 | Adobe Audition version 14.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated att… |
CVE-2021-40737 | Medium | 5.5 | 2022-03-16 | Adobe Audition version 14.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated att… |
CVE-2021-20299 | High | 7.5 | 2022-03-16 | A flaw was found in OpenEXR's Multipart input file functionality. A crafted multi-part input file with no actual parts can trigger a NULL pointer dereference… |
CVE-2022-24577 | High | 7.8 | 2022-03-14 | GPAC 1.0.1 is affected by a NULL pointer dereference in gf_utf8_wcslen. (gf_utf8_wcslen is a renamed Unicode utf8_wcslen function.) |
CVE-2022-24574 | Medium | 5.5 | 2022-03-14 | GPAC 1.0.1 is affected by a NULL pointer dereference in gf_dump_vrml_field.isra (). |
CVE-2021-42577 | High | 7.5 | 2022-03-11 | An issue was discovered in Softing OPC UA C++ SDK before 5.70. A malformed OPC/UA message abort packet makes the client crash with a NULL pointer dereference. |
CVE-2022-0908 | High | 7.7 | 2022-03-11 | Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff versions up to 4.3.0 could lead to Deni… |
CVE-2022-25108 | Medium | 5.5 | 2022-03-10 | Foxit PDF Reader and Editor before 11.2.1 and PhantomPDF before 10.1.7 allow a NULL pointer dereference during PDF parsing because the pointer is used without… |