CWE-476 · NULL Pointer Dereference (page 40)
Page 40 of 57 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-0433 | Medium | 5.5 | 2022-03-10 | A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the map_get_next_key function of the BPF bloom filter… |
CVE-2021-4095 | Medium | 5.5 | 2022-03-10 | A NULL pointer dereference was found in the Linux kernel's KVM when dirty ring logging is enabled without an active vCPU context. An unprivileged local attacke… |
CVE-2021-3739 | High | 7.1 | 2022-03-10 | A NULL pointer dereference flaw was found in the btrfs_rm_device function in fs/btrfs/volumes.c in the Linux Kernel, where triggering the bug requires ‘CAP_SYS… |
CVE-2021-34122 | Medium | 5.5 | 2022-03-10 | The function bitstr_tell at bitstr.c in ffjpeg commit 4ab404e has a NULL pointer dereference. |
CVE-2022-0890 | Medium | 5.5 | 2022-03-10 | NULL Pointer Dereference in GitHub repository mruby/mruby prior to 3.2. |
CVE-2021-4198 | Medium | 6.1 | 2022-03-07 | A NULL Pointer Dereference vulnerability in the messaging_ipc.dll component as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint… |
CVE-2021-26948 | High | 7.8 | 2022-03-03 | Null pointer dereference in the htmldoc v1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of service via a crafted html file. |
CVE-2021-23191 | High | 7.8 | 2022-03-02 | A security issue was found in htmldoc v1.9.12 and before. A NULL pointer dereference in the function image_load_jpeg() in image.cxx may result in denial of ser… |
CVE-2021-23180 | High | 7.8 | 2022-03-02 | A flaw was found in htmldoc in v1.9.12 and before. Null pointer dereference in file_extension(),in file.c may lead to execute arbitrary code and denial of serv… |
CVE-2021-3596 | Medium | 6.5 | 2022-02-24 | A NULL pointer dereference flaw was found in ImageMagick in versions prior to 7.0.10-31 in ReadSVGImage() in coders/svg.c. This issue is due to not checking th… |
CVE-2021-43824 | High | 7.5 | 2022-02-22 | Envoy is an open source edge and service proxy, designed for cloud-native applications. In affected versions a crafted request crashes Envoy when a CONNECT req… |
CVE-2022-0712 | Medium | 5.5 | 2022-02-22 | NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.4. |
CVE-2022-0696 | Medium | 5.5 | 2022-02-21 | NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4428. |
CVE-2022-0632 | Medium | 5.5 | 2022-02-19 | NULL Pointer Dereference in Homebrew mruby prior to 3.2. |
CVE-2022-25258 | Medium | 4.6 | 2022-02-16 | An issue was discovered in drivers/usb/gadget/composite.c in the Linux kernel before 5.16.10. The USB Gadget subsystem lacks certain validation of interface OS… |
CVE-2022-23199 | Medium | 5.5 | 2022-02-16 | Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker… |
CVE-2022-23198 | Medium | 5.5 | 2022-02-16 | Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker… |
CVE-2022-23189 | Medium | 5.5 | 2022-02-16 | Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker… |
CVE-2022-0617 | Medium | 5.5 | 2022-02-16 | A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers udf_file_write_iter function for the malic… |
CVE-2021-44960 | Medium | 6.5 | 2022-02-15 | In SVGPP SVG++ library 1.3.0, the XMLDocument::getRoot function in the renderDocument function handled the XMLDocument object improperly, returning a null poin… |
CVE-2022-0582 | Medium | 6.3 | 2022-02-14 | Unaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted captu… |
CVE-2021-44879 | Medium | 5.5 | 2022-02-14 | In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL pointer dereference. |
CVE-2022-0562 | Medium | 5.5 | 2022-02-11 | Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tif_dirread.c in libtiff versions from 4.0 to 4.3.0 could lead to… |
CVE-2022-0561 | Medium | 5.5 | 2022-02-11 | Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead… |
CVE-2021-45385 | Medium | 6.5 | 2022-02-11 | A Null Pointer Dereference vulnerability exits in ffjpeg d5cfd49 (2021-12-06) in bmp_load(). When the size information in metadata of the bmp is out of range… |
CVE-2021-35075 | High | 8.4 | 2022-02-11 | Possible null pointer dereference due to lack of WDOG structure validation during registration in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industri… |
CVE-2021-35068 | High | 8.4 | 2022-02-11 | Lack of null check while freeing the device information buffer in the Bluetooth HFP protocol can lead to a NULL pointer dereference in Snapdragon Auto, Snapdra… |
CVE-2021-33068 | Medium | 6.5 | 2022-02-09 | Null pointer dereference in subsystem for Intel(R) AMT before versions 15.0.35 may allow an authenticated user to potentially enable denial of service via netw… |
CVE-2021-0111 | Medium | 6.7 | 2022-02-09 | NULL pointer dereference in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local ac… |
CVE-2022-21815 | Medium | 5.5 | 2022-02-07 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for private IOCTLs where a NULL pointer derefere… |
CVE-2022-23595 | Medium | 5.3 | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. When building an XLA compilation cache, if default settings are used, TensorFlow triggers a null point… |
CVE-2022-23589 | Medium | 6.5 | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, Grappler component of TensorFlow can trigger a null pointer dereference. Ther… |
CVE-2022-23577 | Medium | 6.5 | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. The implementation of `GetInitOp` is vulnerable to a crash caused by dereferencing a null pointer. The… |
CVE-2022-23570 | Medium | 6.5 | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. When decoding a tensor from protobuf, TensorFlow might do a null-dereference if attributes of some mut… |
CVE-2022-0481 | High | 7.5 | 2022-02-04 | NULL Pointer Dereference in Homebrew mruby prior to 3.2. |
CVE-2021-4043 | Medium | 5.5 | 2022-02-04 | NULL Pointer Dereference in GitHub repository gpac/gpac prior to 1.1.0. |
CVE-2022-24249 | Medium | 5.5 | 2022-02-04 | A Null Pointer Dereference vulnerability exists in GPAC 1.1.0 via the xtra_box_write function in /box_code_base.c, which causes a Denial of Service. This vulne… |
CVE-2022-21739 | Medium | 6.5 | 2022-02-03 | Tensorflow is an Open Source Machine Learning Framework. The implementation of `QuantizedMaxPool` has an undefined behavior where user controlled inputs can tr… |
CVE-2022-21736 | High | 7.6 | 2022-02-03 | Tensorflow is an Open Source Machine Learning Framework. The implementation of `SparseTensorSliceDataset` has an undefined behavior: under certain condition it… |
CVE-2022-22510 | High | 7.5 | 2022-02-02 | Codesys Profinet in version V4.2.0.0 is prone to null pointer dereference that allows a denial of service (DoS) attack of an unauthenticated user via SNMP. |
CVE-2022-0419 | Medium | 5.5 | 2022-02-01 | NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.0. |
CVE-2021-46664 | Medium | 5.5 | 2022-02-01 | MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr. |
CVE-2022-0286 | Medium | 5.5 | 2022-01-31 | A flaw was found in the Linux kernel. A null pointer dereference in bond_ipsec_add_sa() may lead to local denial of service. |
CVE-2021-45079 | Critical | 9.1 | 2022-01-31 | In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP… |
CVE-2021-22570 | Medium | 6.5 | 2022-01-26 | Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name du… |
CVE-2022-23025 | High | 7.5 | 2022-01-25 | On BIG-IP version 16.1.x before 16.1.1, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, when a SIP ALG profile is configured on a vir… |
CVE-2022-23022 | High | 7.5 | 2022-01-25 | On BIG-IP version 16.1.x before 16.1.2, when an HTTP profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkern… |
CVE-2022-23021 | High | 7.5 | 2022-01-25 | On BIG-IP version 16.1.x before 16.1.2, when any of the following configurations are configured on a virtual server, undisclosed requests can cause the Traffic… |
CVE-2022-23020 | High | 7.5 | 2022-01-25 | On BIG-IP version 16.1.x before 16.1.2, when the 'Respond on Error' setting is enabled on the Request Logging profile and configured on a virtual server, undis… |
CVE-2022-23017 | High | 7.5 | 2022-01-25 | On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x, when a virtual server is configured with a DN… |
CVE-2022-23016 | High | 7.5 | 2022-01-25 | On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP SSL Forward Proxy with TLS 1.3 is configured on a virtual server, undisclosed requests… |
CVE-2021-4145 | Medium | 6.5 | 2022-01-25 | A NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to 6.2.0. The `self` pointer is dereferenced in mirror_wait_on_c… |
CVE-2021-45847 | Medium | 5.5 | 2022-01-25 | Several missing input validations in the 3MF parser component of Slic3r libslic3r 1.3.0 can each allow an attacker to cause an application crash using a crafte… |
CVE-2021-45846 | Medium | 5.5 | 2022-01-25 | A flaw in the AMF parser of Slic3r libslic3r 1.3.0 allows an attacker to cause an application crash using a crafted AMF document, where a metadata tag lacks a… |
CVE-2021-45343 | Medium | 5.5 | 2022-01-25 | In LibreCAD 2.2.0, a NULL pointer dereference in the HATCH handling of libdxfrw allows an attacker to crash the application using a crafted DXF document. |
CVE-2021-45340 | Medium | 6.5 | 2022-01-25 | In Libsixel prior to and including v1.10.3, a NULL pointer dereference in the stb_image.h component of libsixel allows attackers to cause a denial of service (… |
CVE-2021-46311 | Medium | 5.5 | 2022-01-21 | A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_sg_destroy_routes () at scenegraph/vrml_route.c. This vulnerability can lead… |
CVE-2021-46243 | Medium | 6.5 | 2022-01-21 | An untrusted pointer dereference vulnerability exists in HDF5 v1.13.1-1 via the function H5O__dtype_decode_helper () at hdf5/src/H5Odtype.c. This vulnerability… |
CVE-2021-46240 | Medium | 5.5 | 2022-01-21 | A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_dump_vrml_sffield () at scene_manager/scene_dump.c. This vulnerability can l… |
CVE-2021-46237 | Medium | 5.5 | 2022-01-21 | An untrusted pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_node_unregister () at scenegraph/base_scenegraph.c. This vulnerability… |
CVE-2021-46236 | Medium | 5.5 | 2022-01-21 | A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_sg_vrml_field_pointer_del () at scenegraph/vrml_tools.c. This vulnerability… |
CVE-2021-46234 | Medium | 5.5 | 2022-01-21 | A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_node_unregister () at scenegraph/base_scenegraph.c. This vulnerability can l… |
CVE-2022-0326 | Medium | 5.5 | 2022-01-21 | NULL Pointer Dereference in Homebrew mruby prior to 3.2. |
CVE-2021-46335 | Medium | 5.5 | 2022-01-20 | Moddable SDK v11.5.0 was discovered to contain a NULL pointer dereference in the component fx_Function_prototype_hasInstance. |
CVE-2021-38786 | High | 7.5 | 2022-01-19 | There is a NULL pointer dereference in media/libcedarc/vdecoder of Allwinner R818 SoC Android Q SDK V1.0, which could cause a media crash (denial of service). |
CVE-2021-34406 | Medium | 4.7 | 2022-01-18 | NVIDIA Tegra kernel driver contains a vulnerability in NVHost, where a specific race condition can lead to a null pointer dereference, which may lead to a syst… |
CVE-2021-38785 | High | 7.5 | 2022-01-18 | There is a NULL pointer deference in the Allwinner R818 SoC Android Q SDK V1.0 camera driver /dev/cedar_dev that could use the ioctl cmd IOCTL_GET_IOMMU_ADDR t… |
CVE-2021-38784 | High | 7.5 | 2022-01-18 | There is a NULL pointer dereference in the syscall open_exec function of Allwinner R818 SoC Android Q SDK V1.0 that could executable a malicious file to cause… |
CVE-2022-0240 | High | 7.5 | 2022-01-17 | mruby is vulnerable to NULL Pointer Dereference |
CVE-2022-23094 | High | 7.5 | 2022-01-15 | Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted IKEv1 packet because p… |
CVE-2021-46171 | Medium | 5.5 | 2022-01-14 | Modex v2.11 was discovered to contain a NULL pointer dereference in set_create_id() at xtract.c. |
CVE-2021-46019 | Medium | 5.5 | 2022-01-14 | An untrusted pointer dereference in rec_db_destroy() at rec-db.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash. |
CVE-2021-45773 | High | 7.5 | 2022-01-14 | A NULL pointer dereference in CS104_IPAddress_setFromString at src/iec60870/cs104/cs104_slave.c of lib60870 commit 0d5e76e can lead to a segmentation fault or… |
CVE-2021-45769 | High | 7.5 | 2022-01-14 | A NULL pointer dereference in AcseConnection_parseMessage at src/mms/iso_acse/acse.c of libiec61850 v1.5.0 can lead to a segmentation fault or application cras… |
CVE-2021-44741 | Low | 3.3 | 2022-01-14 | Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a Null pointer dereference vuln… |
CVE-2021-44740 | Low | 3.3 | 2022-01-14 | Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a Null pointer dereference vuln… |
CVE-2021-45761 | High | 7.5 | 2022-01-14 | ROPium v3.1 was discovered to contain an invalid memory address dereference via the find() function. |
CVE-2022-23222 | High | 7.8 | 2022-01-14 | kernel/bpf/verifier.c in the Linux kernel through 5.15.14 allows local users to gain privileges because of the availability of pointer arithmetic via certain *… |
CVE-2021-40576 | Medium | 5.5 | 2022-01-13 | The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the gf_isom_get_payt_count function in hint_track.c, which allows attackers to… |
CVE-2021-40575 | Medium | 5.5 | 2022-01-13 | The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the mpgviddmx_process function in reframe_mpgvid.c, which allows attackers to c… |
CVE-2021-30330 | High | 7.5 | 2022-01-13 | Possible null pointer dereference due to improper validation of APE clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer I… |
CVE-2021-40565 | Medium | 5.5 | 2022-01-12 | A Segmentation fault caused by a null pointer dereference vulnerability exists in Gpac through 1.0.1 via the gf_avc_parse_nalu function in av_parsers.c when us… |
CVE-2021-40564 | Medium | 5.5 | 2022-01-12 | A Segmentation fault caused by null pointer dereference vulnerability eists in Gpac through 1.0.2 via the avc_parse_slice function in av_parsers.c when using m… |
CVE-2021-40563 | Medium | 5.5 | 2022-01-12 | A Segmentation fault exists casued by null pointer dereference exists in Gpac through 1.0.1 via the naludmx_create_avc_decoder_config function in reframe_nalu… |
CVE-2021-40559 | Medium | 5.5 | 2022-01-12 | A null pointer deference vulnerability exists in gpac through 1.0.1 via the naludmx_parse_nal_avc function in reframe_nalu, which allows a denail of service. |
CVE-2020-25427 | Medium | 5.5 | 2022-01-10 | A Null pointer dereference vulnerability exits in MP4Box - GPAC version 0.8.0-rev177-g51a8ef874-master via the gf_isom_get_track_id function, which causes a de… |
CVE-2021-46051 | Medium | 5.5 | 2022-01-10 | A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the Media_IsSelfContained function, which could cause a Denial of Service. . |
CVE-2021-46049 | Medium | 5.5 | 2022-01-10 | A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf_fileio_check function, which could cause a Denial of Service. |
CVE-2021-46047 | Medium | 5.5 | 2022-01-10 | A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf_hinter_finalize function. |
CVE-2021-46046 | Medium | 5.5 | 2022-01-10 | A Pointer Derefernce Vulnerbility exists GPAC 1.0.1 the gf_isom_box_size function, which could cause a Denial of Service (context-dependent). |
CVE-2021-40039 | High | 7.5 | 2022-01-10 | There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affect service integri… |
CVE-2021-40031 | High | 7.5 | 2022-01-10 | There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affect service integri… |
CVE-2021-40027 | High | 7.5 | 2022-01-10 | The bone voice ID TA has a vulnerability in calculating the buffer length,Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2021-40018 | High | 7.5 | 2022-01-10 | The eID module has a null pointer reference vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2021-46044 | Medium | 5.5 | 2022-01-06 | A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1via ShiftMetaOffset.isra, which causes a Denial of Service (context-dependent). |
CVE-2021-46043 | Medium | 5.5 | 2022-01-06 | A Pointer Dereference Vulnerability exits in GPAC 1.0.1 in the gf_list_count function, which causes a Denial of Service. |
CVE-2021-46042 | Medium | 5.5 | 2022-01-06 | A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the _fseeko function, which causes a Denial of Service. |
CVE-2021-46040 | Medium | 5.5 | 2022-01-06 | A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the finplace_shift_moov_meta_offsets function, which causes a Denial of Servie (context-dependent). |
CVE-2021-46039 | Medium | 5.5 | 2022-01-06 | A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the shift_chunk_offsets.part function, which causes a Denial of Service (context-dependent). |
CVE-2021-46038 | Medium | 5.5 | 2022-01-05 | A Pointer Dereference vulnerability exists in GPAC 1.0.1 in unlink_chunk.isra, which causes a Denial of Service (context-dependent). |