CWE-476 · NULL Pointer Dereference (page 41)
Page 41 of 56 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-37688 | High | 7.8 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can craft a TFLite model that would trigger a null poin… |
CVE-2021-37681 | High | 7.8 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of SVDF in TFLite is [vulnerable to a null point… |
CVE-2021-37648 | High | 7.8 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions the code for `tf.raw_ops.SaveV2` does not properly validate the inp… |
CVE-2021-37659 | High | 7.3 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to… |
CVE-2021-37649 | High | 7.7 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. The code for `tf.raw_ops.UncompressElement` can be made to trigger a null pointer derefe… |
CVE-2021-37647 | High | 7.7 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. When a user does not supply arguments that determine a valid sparse tensor, `tf.raw_ops… |
CVE-2021-37643 | High | 7.7 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. If a user does not provide a valid padding value to `tf.raw_ops.MatrixDiagPartOp`, then… |
CVE-2021-37639 | High | 8.4 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. When restoring tensors via raw APIs, if the tensor name is not provided, TensorFlow can… |
CVE-2021-37638 | High | 7.7 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. Sending invalid argument for `row_partition_types` of `tf.raw_ops.RaggedTensorToTensor`… |
CVE-2021-37637 | High | 7.7 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. It is possible to trigger a null pointer dereference in TensorFlow by passing an invalid… |
CVE-2021-38604 | High | 7.5 | 2021-08-12 | In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer d… |
CVE-2021-38567 | High | 7.5 | 2021-08-11 | An issue was discovered in Foxit PDF Editor before 11.0.1 and PDF Reader before 11.0.1 on macOS. It mishandles missing dictionary entries, leading to a NULL po… |
CVE-2021-1112 | Medium | 5.5 | 2021-08-11 | NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where a null pointer dereference may lead to complete denial of service. |
CVE-2021-32440 | Medium | 5.5 | 2021-08-11 | The Media_RewriteODFrame function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box comma… |
CVE-2021-32438 | Medium | 5.5 | 2021-08-11 | The gf_media_export_filters function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box co… |
CVE-2021-32437 | Medium | 5.5 | 2021-08-11 | The gf_hinter_finalize function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command. |
CVE-2021-29296 | High | 7.5 | 2021-08-10 | Null Pointer Dereference vulnerability in D-Link DIR-825 2.10b02, which could let a remote malicious user cause a denial of service. The vulnerability could be… |
CVE-2021-29295 | High | 7.5 | 2021-08-10 | Null Pointer Dereference vulnerability exists in D-Link DSP-W215 1.10, which could let a remote malicious user cause a denial of servie via usr/bin/lighttpd. I… |
CVE-2021-29294 | High | 7.5 | 2021-08-10 | Null Pointer Dereference vulnerability exists in D-Link DSL-2740R UK_1.01, which could let a remove malicious user cause a denial of service via the send_hnap_… |
CVE-2021-28845 | High | 7.5 | 2021-08-10 | Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could… |
CVE-2021-28844 | High | 7.5 | 2021-08-10 | Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03 by sending t… |
CVE-2021-28843 | High | 7.5 | 2021-08-10 | Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03 by sending t… |
CVE-2021-28842 | High | 7.5 | 2021-08-10 | Null Pointer Deference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could l… |
CVE-2021-28841 | High | 7.5 | 2021-08-10 | Null Pointer Dereference vulnerability in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could let a… |
CVE-2021-28840 | High | 7.5 | 2021-08-10 | Null Pointer Dereference vulnerability exists in D-Link DAP-2310 2.07.RC031, DAP-2330 1.07.RC028, DAP-2360 2.07.RC043, DAP-2553 3.06.RC027, DAP-2660 1.13.RC074… |
CVE-2021-28839 | High | 7.5 | 2021-08-10 | Null Pointer Dereference vulnerability exists in D-Link DAP-2310 2.07.RC031, DAP-2330 1.07.RC028, DAP-2360 2.07.RC043, DAP-2553 3.06.RC027, DAP-2660 1.13.RC074… |
CVE-2021-28838 | High | 7.5 | 2021-08-10 | Null pointer dereference vulnerability in D-Link DAP-2310 2,10RC039, DAP-2330 1.10RC036 BETA, DAP-2360 2.10RC055, DAP-2553 3.10rc039 BETA, DAP-2660 1.15rc131b… |
CVE-2021-33717 | Medium | 5.5 | 2021-08-10 | A vulnerability has been identified in JT2Go (All versions < V13.2.0.1), Teamcenter Visualization (All versions < V13.2.0.1). When parsing specially crafted CG… |
CVE-2021-37615 | Medium | 4.7 | 2021-08-09 | Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A null pointer dereference was found… |
CVE-2021-37616 | Medium | 5.5 | 2021-08-09 | Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A null pointer dereference was found… |
CVE-2021-38208 | Medium | 5.5 | 2021-08-08 | net/nfc/llcp_sock.c in the Linux kernel before 5.12.10 allows local unprivileged users to cause a denial of service (NULL pointer dereference and BUG) by makin… |
CVE-2021-38206 | Medium | 5.5 | 2021-08-08 | The mac80211 subsystem in the Linux kernel before 5.12.13, when a device supporting only 5 GHz is used, allows attackers to cause a denial of service (NULL poi… |
CVE-2021-38200 | Medium | 5.5 | 2021-08-08 | arch/powerpc/perf/core-book3s.c in the Linux kernel before 5.12.13, on systems with perf_event_paranoid=-1 and no specific PMU driver support registered, allow… |
CVE-2021-35307 | Medium | 6.5 | 2021-08-05 | An issue was discovered in Bento4 through v1.6.0-636. A NULL pointer dereference exists in the AP4_DescriptorFinder::Test component located in /Core/Ap4Descrip… |
CVE-2021-35306 | Medium | 6.5 | 2021-08-05 | An issue was discovered in Bento4 through v1.6.0-636. A NULL pointer dereference exists in the function AP4_StszAtom::WriteFields located in Ap4StszAtom.cpp. I… |
CVE-2020-22352 | Medium | 5.5 | 2021-08-04 | The gf_dash_segmenter_probe_input function in GPAC v0.8 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4B… |
CVE-2021-36765 | High | 7.5 | 2021-08-04 | In CODESYS EtherNetIP before 4.1.0.0, specific EtherNet/IP requests may cause a null pointer dereference in the downloaded vulnerable EtherNet/IP stack that is… |
CVE-2021-36764 | High | 7.5 | 2021-08-04 | In CODESYS Gateway V3 before 3.5.17.10, there is a NULL Pointer Dereference. Crafted communication requests may cause a Null pointer dereference in the affecte… |
CVE-2021-27953 | High | 7.5 | 2021-08-03 | A NULL pointer dereference vulnerability exists on the ecobee3 lite 4.5.81.200 device in the HomeKit Wireless Access Control setup process. A threat actor can… |
CVE-2021-25804 | High | 7.5 | 2021-07-26 | A NULL-pointer dereference in "Open" in avi.c of VideoLAN VLC Media Player 3.0.11 can a denial of service (DOS) in the application. |
CVE-2021-36222 | High | 7.5 | 2021-07-22 | ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attack… |
CVE-2021-20596 | High | 7.5 | 2021-07-22 | NULL Pointer Dereference in MELSEC-F Series FX3U-ENET firmware version 1.14 and prior, FX3U-ENET-L firmware version 1.14 and prior and FX3U-ENET-P502 firmware… |
CVE-2021-1096 | Medium | 5.5 | 2021-07-22 | NVIDIA Windows GPU Display Driver for Windows contains a vulnerability in the NVIDIA kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where dereferen… |
CVE-2021-1095 | Medium | 5.5 | 2021-07-22 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handlers for all control calls with embedded p… |
CVE-2020-19488 | Medium | 5.5 | 2021-07-21 | An issue was discovered in box_code_apple.c:119 in Gpac MP4Box 0.8.0, allows attackers to cause a Denial of Service due to an invalid read on function ilst_ite… |
CVE-2020-19470 | Medium | 5.5 | 2021-07-21 | An issue has been found in function DCTStream::getChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a NULL pointer dereference (i… |
CVE-2020-19468 | Medium | 5.5 | 2021-07-21 | An issue has been found in function EmbedStream::getChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a null pointer derefenrece… |
CVE-2021-1103 | Medium | 4.4 | 2021-07-21 | NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can dereference a NULL pointer, which may lead to denial of se… |
CVE-2021-1101 | Medium | 5.5 | 2021-07-21 | NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can dereference a NULL pointer, which may lead to denial of se… |
CVE-2020-20231 | Medium | 6.5 | 2021-07-14 | Mikrotik RouterOs through stable version 6.48.3 suffers from a memory corruption vulnerability in the /nova/bin/detnet process. An authenticated remote attacke… |
CVE-2021-22318 | Medium | 5.5 | 2021-07-14 | A component of the HarmonyOS 2.0 has a Null Pointer Dereference Vulnerability. Local attackers may exploit this vulnerability to cause system denial of service. |
CVE-2020-19722 | Medium | 6.5 | 2021-07-13 | An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a direct copy to NULL pointer dereference, leading to a denial of service… |
CVE-2020-19720 | Medium | 6.5 | 2021-07-13 | An unhandled memory allocation failure in Core/AP4IkmsAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service (DOS). |
CVE-2020-19718 | Medium | 6.5 | 2021-07-13 | An unhandled memory allocation failure in Core/Ap4Atom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service (DOS). |
CVE-2020-19717 | Medium | 6.5 | 2021-07-13 | An unhandled memory allocation failure in Core/Ap48bdlAtom.cpp of Bento 1.5.1-628 causes a NULL pointer dereference, leading to a denial of service (DOS). |
CVE-2020-20252 | Medium | 6.5 | 2021-07-13 | Mikrotik RouterOs before stable version 6.47 suffers from a memory corruption vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker… |
CVE-2020-20250 | Medium | 6.5 | 2021-07-13 | Mikrotik RouterOs before stable version 6.47 suffers from a memory corruption vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker… |
CVE-2021-33715 | Medium | 5.5 | 2021-07-13 | A vulnerability has been identified in JT Utilities (All versions < V13.0.2.0). When parsing specially crafted JT files, a race condition could cause an object… |
CVE-2021-33714 | Medium | 5.5 | 2021-07-13 | A vulnerability has been identified in JT Utilities (All versions < V13.0.2.0). When parsing specially crafted JT files, a missing check for the validity of an… |
CVE-2020-20216 | Medium | 6.5 | 2021-07-07 | Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/graphing process. An authenticated remote attacker ca… |
CVE-2020-20212 | Medium | 6.5 | 2021-07-07 | Mikrotik RouterOs 6.44.5 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/console process. An authenticated remote attacker can… |
CVE-2021-36147 | High | 7.5 | 2021-07-02 | An issue was discovered in ACRN before 2.5. It allows a devicemodel/hw/pci/virtio/virtio_net.c virtio_net_ping_rxq NULL pointer dereference for vq->used. |
CVE-2021-36146 | High | 7.5 | 2021-07-02 | ACRN before 2.5 has a devicemodel/hw/pci/xhci.c NULL Pointer Dereference for a trb pointer. |
CVE-2021-36143 | High | 7.5 | 2021-07-02 | ACRN before 2.5 has a hw/pci/virtio/virtio.c vq_endchains NULL Pointer Dereference. |
CVE-2010-4816 | High | 7.5 | 2021-06-22 | It was found in FreeBSD 8.0, 6.3 and 4.9, and OpenBSD 4.6 that a null pointer dereference in ftpd/popen.c may lead to remote denial of service of the ftpd serv… |
CVE-2021-0555 | High | 7.5 | 2021-06-22 | In RenderStruct of protostream_objectsource.cc, there is a possible crash due to a missing null check. This could lead to remote denial of service with no addi… |
CVE-2021-33572 | Low | 3.5 | 2021-06-21 | A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Linux Security whereby the FSAVD component used in certain F-Secure products can crash while… |
CVE-2021-31618 | High | 7.5 | 2021-06-15 | Apache HTTP Server protocol handler for the HTTP/2 protocol checks received request headers against the size limitations as configured for the server and used… |
CVE-2021-27345 | Medium | 5.5 | 2021-06-10 | A null pointer dereference was discovered in ucompthread in stream.c in Irzip 0.631 which allows attackers to cause a denial of service (DOS) via a crafted com… |
CVE-2020-25467 | Medium | 5.5 | 2021-06-10 | A null pointer dereference was discovered lzo_decompress_buf in stream.c in Irzip 0.621 which allows an attacker to cause a denial of service (DOS) via a craft… |
CVE-2021-34555 | High | 7.5 | 2021-06-10 | OpenDMARC 1.4.1 and 1.4.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a multi-value From header… |
CVE-2021-26690 | High | 7.5 | 2021-06-10 | Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Cookie header handled by mod_session can cause a NULL pointer dereference and crash, leading to… |
CVE-2020-13950 | High | 7.5 | 2021-06-10 | Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer dereference) with specially crafted requests using both Content-… |
CVE-2021-27632 | High | 7.5 | 2021-06-09 | SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT… |
CVE-2021-27631 | High | 7.5 | 2021-06-09 | SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT… |
CVE-2021-27630 | High | 7.5 | 2021-06-09 | SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT… |
CVE-2021-27607 | High | 7.5 | 2021-06-09 | SAP NetWeaver ABAP Server and ABAP Platform (Dispatcher), versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC… |
CVE-2019-14584 | High | 7.8 | 2021-06-03 | Null pointer dereference in Tianocore EDK2 may allow an authenticated user to potentially enable escalation of privilege via local access. |
CVE-2019-12067 | Medium | 6.5 | 2021-06-02 | The ahci_commit_buf function in ide/ahci.c in QEMU allows attackers to cause a denial of service (NULL dereference) when the command header 'ad->cur_cmd' is nu… |
CVE-2020-35503 | Medium | 6.0 | 2021-06-02 | A NULL pointer dereference flaw was found in the megasas-gen2 SCSI host bus adapter emulation of QEMU in versions before and including 6.0. This issue occurs i… |
CVE-2021-3543 | Medium | 6.7 | 2021-06-01 | A flaw null pointer dereference in the Nitro Enclaves kernel driver was found in the way that Enclaves VMs forces closures on the enclave file descriptor. A lo… |
CVE-2020-18395 | High | 7.5 | 2021-05-28 | A NULL-pointer deference issue was discovered in GNU_gama::set() in ellipsoid.h in Gama 2.04 which can lead to a denial of service (DOS) via segment faults cau… |
CVE-2021-3514 | Medium | 6.5 | 2021-05-28 | When using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash. |
CVE-2020-35505 | Medium | 4.4 | 2021-05-28 | A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0. This issue occurs while handling th… |
CVE-2020-35504 | Medium | 6.0 | 2021-05-28 | A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions before 6.0.0. This flaw allows a privileged guest user to crash the… |
CVE-2021-30500 | High | 7.8 | 2021-05-27 | Null pointer dereference was found in upx PackLinuxElf::canUnpack() in p_lx_elf.cpp,in version UPX 4.0.0. That allow attackers to execute arbitrary code and ca… |
CVE-2021-20196 | Medium | 6.5 | 2021-05-26 | A NULL pointer dereference flaw was found in the floppy disk emulator of QEMU. This issue occurs while processing read/write ioport commands if the selected fl… |
CVE-2020-20450 | High | 7.5 | 2021-05-25 | FFmpeg 4.2 is affected by null pointer dereference passed as argument to libavformat/aviobuf.c, which could cause a Denial of Service. |
CVE-2021-3320 | Medium | 5.9 | 2021-05-25 | Type Confusion in 802154 ACK Frames Handling. Zephyr versions >= v2.4.0 contain NULL Pointer Dereference (CWE-476). For more information, see https://github.co… |
CVE-2020-10066 | Low | 2.5 | 2021-05-25 | Incorrect Error Handling in Bluetooth HCI core. Zephyr versions >= v1.14.2, >= v2.2.0 contain NULL Pointer Dereference (CWE-476). For more information, see htt… |
CVE-2021-28683 | High | 7.5 | 2021-05-20 | An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable NULL pointer dereference and crash in TLS when an unknown TLS alert code is re… |
CVE-2021-3480 | High | 7.5 | 2021-05-20 | A flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacke… |
CVE-2020-20266 | Medium | 6.5 | 2021-05-19 | Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/dot1x process. An authenticated remote attacker can… |
CVE-2020-20222 | Medium | 6.5 | 2021-05-18 | Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/sniffer process. An authenticated remote attacker can… |
CVE-2020-21835 | Medium | 6.5 | 2021-05-17 | A null pointer deference issue exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2337. |
CVE-2020-21834 | Medium | 6.5 | 2021-05-17 | A null pointer deference issue exists in GNU LibreDWG 0.10 via get_bmp ../../programs/dwgbmp.c:164. |
CVE-2020-21817 | Medium | 6.5 | 2021-05-17 | A null pointer dereference issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:29. which causes a denial of service (application cras… |
CVE-2020-21815 | Medium | 6.5 | 2021-05-17 | A null pointer deference issue exists in GNU LibreDWG 0.10.2641 via output_TEXT ../../programs/dwg2SVG.c:114, which causes a denial of service (application cra… |
CVE-2021-3537 | Medium | 5.9 | 2021-05-14 | A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference… |
CVE-2021-29616 | Low | 2.5 | 2021-05-14 | TensorFlow is an end-to-end open source platform for machine learning. The implementation of TrySimplify(https://github.com/tensorflow/tensorflow/blob/c22d88d6… |