CWE-476 · NULL Pointer Dereference (page 4)
Page 4 of 56 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-46086 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: use a stable FDB dst snapshot in RCU readers Local FDB entries can be rewrit… |
CVE-2026-46079 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: rbd: fix null-ptr-deref when device_add_disk() fails do_rbd_add() publishes the device wi… |
CVE-2026-46034 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: vfio/cdx: Fix NULL pointer dereference in interrupt trigger path Add validation to ensure… |
CVE-2026-46024 | High | 7.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() If a message of typ… |
CVE-2026-46016 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: xlnx: Only access buffer information if IPI is buffered In the receive callba… |
CVE-2026-45982 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch() Cover a missed e… |
CVE-2026-45978 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: staging: greybus: lights: avoid NULL deref gb_lights_light_config() stores channel_count… |
CVE-2026-45969 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: HID: playstation: Add missing check for input_ff_create_memless The ps_gamepad_create() f… |
CVE-2026-45968 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: cpuidle: Skip governor when only one idle state is available On certain platforms (PowerN… |
CVE-2026-45966 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix NULL pointer dereference in __unix_needs_revalidation When receiving file d… |
CVE-2026-45965 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix invalid deref of rawdata when export_binary is unset If the export_binary p… |
CVE-2026-45963 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: ASoC: nau8821: Cancel delayed work on component remove Attempting to unload the driver wh… |
CVE-2026-45959 | High | 7.8 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree Annotating a local poin… |
CVE-2026-45958 | High | 7.1 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: drm/exynos: vidi: fix to avoid directly dereferencing user pointer In vidi_connection_ioc… |
CVE-2026-45918 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: ovpn: tcp - don't deref NULL sk_socket member after tcp_close() When deleting a peer in c… |
CVE-2026-45911 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: fix role switching during resume If the role change while we are suspended, t… |
CVE-2026-45877 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients During a warm rese… |
CVE-2026-45876 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: arm64/gcs: Fix error handling in arch_set_shadow_stack_status() alloc_gcs() returns an er… |
CVE-2026-45874 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: phy: freescale: imx8qm-hsio: fix NULL pointer dereference During the probe the refclk_pad… |
CVE-2026-45869 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: power: supply: wm97xx: Fix NULL pointer dereference in power_supply_changed() In `probe()… |
CVE-2026-45857 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: scsi: csiostor: Fix dereference of null pointer rn The error exit path when rn is NULL en… |
CVE-2026-45848 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix NULL sock in aa_sock_file_perm Deal with the potential that sock and sock-s… |
CVE-2025-71308 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix potential NULL pointer dereference in context cleanup aie_destroy_cont… |
CVE-2025-71307 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix NULL pointer dereference on panthor_fw_unplug This patch removes the MCU… |
CVE-2026-45846 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() bareudp_fill_metadat… |
CVE-2026-45845 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: fix NULL pointer dereference in class dump When a TAPRIO child qdisc i… |
CVE-2026-45842 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: slip: reject VJ receive packets on instances with no rstate array slhc_init() accepts rsl… |
CVE-2026-45838 | Medium | 5.5 | 2026-05-27 | In the Linux kernel, the following vulnerability has been resolved: bpf: fix end-of-list detection in cgroup_storage_get_next_key() list_next_entry() never r… |
CVE-2026-9567 | Low | 3.3 | 2026-05-26 | A security flaw has been discovered in GPAC up to 2.4.0. Affected is the function MergeFragment of the file src/isomedia/isom_intern.c of the component MP4Box… |
CVE-2026-7450 | Medium | 5.5 | 2026-05-26 | A maliciously crafted PAR file, when parsed through Autodesk 3ds Max, can force a NULL Pointer Dereference vulnerability. Successful exploitation may cause the… |
CVE-2026-8850 | High | 7.5 | 2026-05-26 | IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_ibm_upload. |
CVE-2026-45836 | Medium | 5.5 | 2026-05-26 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() Add the same NULL gu… |
CVE-2026-45835 | Medium | 5.5 | 2026-05-26 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() Add the same NULL… |
CVE-2026-45834 | Medium | 5.5 | 2026-05-26 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() Add the same NULL gu… |
CVE-2026-8479 | | 2026-05-26 | IEC 60870-5-104 used in bidirectional mode in RTU500 is vulnerable for a NULL pointer dereferencing, if a specially crafted sequence of messages is sent for a… | |
CVE-2026-9529 | Low | 3.3 | 2026-05-26 | A security flaw has been discovered in GNU LibreDWG up to 0.14. The affected element is the function match_BLOCK_HEADER of the file dwggrep.c of the component… |
CVE-2026-9503 | Low | 3.3 | 2026-05-25 | A security flaw has been discovered in GNU LibreDWG up to 0.14. This impacts the function dwg_next_entity of the file src/decode.c of the component DWG File Ha… |
CVE-2026-48829 | High | 7.5 | 2026-05-24 | In GNU SASL before 2.2.3, DIGEST-MD5 has a NULL pointer dereference affecting both clients and servers, via a known token with no accompanying = character. Thi… |
CVE-2026-41069 | Medium | 6.5 | 2026-05-22 | libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, a malformed HEIF sequence file can trigger an out-of-bounds read in c… |
CVE-2026-39835 | Medium | 5.3 | 2026-05-22 | SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a… |
CVE-2026-43496 | Medium | 5.5 | 2026-05-21 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked When r… |
CVE-2026-32738 | Medium | 6.5 | 2026-05-19 | libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 792-byte HEIF sequence file with samples_per_chunk=0 in the… |
CVE-2026-32134 | Medium | 5.9 | 2026-05-19 | NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. In versions 0.24.10 and below, when NanoMQ handles high-concurrency reconnect traffic usi… |
CVE-2026-47308 | Medium | 5.5 | 2026-05-19 | NULL pointer dereference vulnerability in Samsung Open Source Walrus allows Pointer Manipulation. This issue affects Walrus: f339b8ee4ea701772e8ae640b3d1b12ac… |
CVE-2026-47307 | Medium | 5.5 | 2026-05-19 | NULL pointer dereference vulnerability in Samsung Open Source Walrus allows an attacker to cause a denial of service via a crafted WebAssembly module containin… |
CVE-2026-25110 | Low | 3.3 | 2026-05-19 | in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS. |
CVE-2026-32849 | Medium | 5.5 | 2026-05-18 | NetBSD prior to commit ec8451e contains a signed integer overflow vulnerability in the cryptodev_op() function in sys/opencrypto/cryptodev.c where the local va… |
CVE-2026-8783 | Medium | 4.3 | 2026-05-18 | A security vulnerability has been detected in omec-project amf up to 2.1.3-dev. This impacts the function UERadioCapabilityCheckResponse of the file ngap/dispa… |
CVE-2026-8782 | Medium | 4.3 | 2026-05-18 | A weakness has been identified in omec-project amf up to 2.1.3-dev. This affects an unknown function of the file ngap/handler.go of the component NGAP Message… |
CVE-2026-8781 | Medium | 4.3 | 2026-05-18 | A security flaw has been discovered in omec-project amf up to 2.1.3-dev. The impacted element is the function RANConfiguration of the file ngap/handler.go. The… |
CVE-2026-8723 | Medium | 5.3 | 2026-05-17 | ### Summary `qs.stringify` throws `TypeError` when called with `arrayFormat: 'comma'` and `encodeValuesOnly: true` on an array containing `null` or `undefin… |
CVE-2026-44638 | Low | 2.5 | 2026-05-14 | libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. From to 1.8.7-r1, a wrong NULL check after an allocation call in sixel_decode_r… |
CVE-2026-43480 | Medium | 5.5 | 2026-05-13 | In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition The acp3x_… |
CVE-2026-42409 | High | 7.5 | 2026-05-13 | When an HTTP/2 profile and an iRule containing the HTTP::redirect or HTTP::respond command are configured on a virtual server, undisclosed requests can cause t… |
CVE-2026-42442 | Low | 3.3 | 2026-05-12 | NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, a null-pointer dereference exists in the UFS/UFS2 filesystem image parser in Nana… |
CVE-2026-40414 | High | 7.4 | 2026-05-12 | Windows TCP/IP Denial of Service Vulnerability |
CVE-2026-40413 | High | 7.4 | 2026-05-12 | Windows TCP/IP Denial of Service Vulnerability |
CVE-2026-40405 | High | 7.5 | 2026-05-12 | Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network. |
CVE-2026-40401 | High | 7.1 | 2026-05-12 | Windows TCP/IP Denial of Service Vulnerability |
CVE-2026-34662 | Medium | 5.5 | 2026-05-12 | Illustrator versions 29.8.6, 30.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. A… |
CVE-2026-34350 | Medium | 6.5 | 2026-05-12 | Null pointer dereference in Windows Storport Miniport Driver allows an unauthorized attacker to deny service over a network. |
CVE-2026-34339 | Medium | 5.5 | 2026-05-12 | Null pointer dereference in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to deny service locally. |
CVE-2026-20914 | Medium | 5.5 | 2026-05-12 | Null pointer dereference for some Intel(R) QAT software drivers for Windows before version 2.6.0 within Ring 3: User Applications may allow a denial of service… |
CVE-2026-20771 | Medium | 6.1 | 2026-05-12 | Null pointer dereference for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service… |
CVE-2025-40833 | High | 7.5 | 2026-05-12 | The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause d… |
CVE-2026-28985 | Medium | 6.2 | 2026-05-11 | A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5. An attac… |
CVE-2026-8252 | Medium | 4.3 | 2026-05-11 | A vulnerability was determined in Open5GS up to 2.7.7. Affected is the function smf_nsmf_handle_create_data_in_hsmf of the component SMF. Executing a manipulat… |
CVE-2026-7262 | High | 7.5 | 2026-05-10 | In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when a SOAP server has a typemap configured, the decodin… |
CVE-2026-7259 | Medium | 6.5 | 2026-05-10 | In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, a mismatch between encoding lists in Oniguruma and mbfl… |
CVE-2026-42183 | Medium | 6.5 | 2026-05-09 | Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From version 4.0.0 to before version 4.0.5, a… |
CVE-2026-6666 | Medium | 5.9 | 2026-05-09 | A possible null pointer reference in PgBouncer before 1.25.2 could lead to a crash, if a server sends an error response without SQLSTATE field. |
CVE-2026-43473 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Add NULL checks when resetting request and reply queues The driver encounte… |
CVE-2026-43471 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_command_trace() The… |
CVE-2026-43463 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: rxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer() rxrpc_kernel… |
CVE-2026-43444 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Unreserve bo if queue update failed Error handling path should unreserve bo t… |
CVE-2026-43443 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp-mach-common: Add missing error check for clock acquisition The acp_card_rt… |
CVE-2026-43441 | High | 7.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled When booting with the 'ip… |
CVE-2026-43436 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces The Scarlet… |
CVE-2026-43431 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: xhci: Fix NULL pointer dereference when reading portli debugfs files Michal reported and… |
CVE-2026-43424 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling The `tpg->tpg_nexus`… |
CVE-2026-43421 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ncm: Fix net_device lifecycle with device_move The network device outlived… |
CVE-2026-43416 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: powerpc, perf: Check that current->mm is alive before getting user callchain It may happe… |
CVE-2026-43413 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: scsi: hisi_sas: Fix NULL pointer exception during user_scan() user_scan() invokes updated… |
CVE-2026-43412 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start During ADSP stop… |
CVE-2026-43410 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-rsu: Fix NULL pointer dereference when RSU is disabled When the Remot… |
CVE-2026-43409 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: kprobes: avoid crash when rmmod/insmod after ftrace killed After we hit ftrace is killed… |
CVE-2026-43408 | High | 7.8 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: ceph: add a bunch of missing ceph_path_info initializers ceph_mdsc_build_path() must be c… |
CVE-2026-43401 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: intel_pstate: Fix NULL pointer dereference in update_cpu_qos_request() The updat… |
CVE-2026-43369 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix NULL pointer dereference in device cleanup When GPU initialization fails due… |
CVE-2026-43367 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix a few more NULL pointer dereference in device cleanup I found a few more pat… |
CVE-2026-43364 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: ublk: fix NULL pointer dereference in ublk_ctrl_set_size() ublk_ctrl_set_size() unconditi… |
CVE-2026-43356 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis: Fix NULL pointer dereference in adis_init The adis_init() function derefe… |
CVE-2026-43337 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw() dcn401_init_hw() assume… |
CVE-2026-43335 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: interconnect: qcom: sm8450: Fix NULL pointer dereference in icc_link_nodes() The change t… |
CVE-2026-43333 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: bpf: reject direct access to nullable PTR_TO_BUF pointers check_mem_access() matches PTR_… |
CVE-2026-43313 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() In acpi_pr… |
CVE-2026-43300 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: drm/panel: Fix a possible null-pointer dereference in jdi_panel_dsi_remove() In jdi_panel… |
CVE-2026-43297 | Medium | 5.5 | 2026-05-08 | In the Linux kernel, the following vulnerability has been resolved: media: rockchip: rga: Fix possible ERR_PTR dereference in rga_buf_init() rga_get_frame()… |
CVE-2026-39836 | High | 7.5 | 2026-05-07 | The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0). |
CVE-2026-41684 | Medium | 6.5 | 2026-05-07 | Incus is a system container and virtual machine manager. Prior to version 7.0.0, backup.GetInfo() trusts the inline backup/index.yaml config when present and o… |