CWE-476 · NULL Pointer Dereference (page 6)
Page 6 of 56 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-30656 | High | 7.5 | 2026-04-16 | A NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing job files containing the fdp_pli option. The callback function… |
CVE-2026-32216 | Medium | 5.5 | 2026-04-14 | Null pointer dereference in Windows Redirected Drive Buffering allows an authorized attacker to deny service locally. |
CVE-2026-32071 | High | 7.5 | 2026-04-14 | Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network. |
CVE-2026-26173 | High | 7.0 | 2026-04-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authoriz… |
CVE-2026-39956 | Medium | 6.1 | 2026-04-13 | jq is a command-line JSON processor. In commits after 69785bf77f86e2ea1b4a20ca86775916889e91c9, the _strindices builtin in jq's src/builtin.c passes its argume… |
CVE-2025-69624 | High | 7.5 | 2026-04-13 | Nitro PDF Pro before 14.43 for Windows contains a NULL pointer dereference vulnerability in the JavaScript implementation of app.alert(). When app.alert() is c… |
CVE-2025-66769 | High | 7.5 | 2026-04-13 | A NULL pointer dereference in Nitro PDF Pro for Windows v14.41.1.4 allows attackers to cause a Denial of Service (DoS) via a crafted XFA packet. |
CVE-2026-31425 | Medium | 5.5 | 2026-04-13 | In the Linux kernel, the following vulnerability has been resolved: rds: ib: reject FRMR registration before IB connection is established rds_ib_get_mr() ext… |
CVE-2026-31424 | Medium | 5.5 | 2026-04-13 | In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP W… |
CVE-2026-31422 | Medium | 5.5 | 2026-04-13 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_flow: fix NULL pointer dereference on shared blocks flow_change() calls tc… |
CVE-2026-31421 | Medium | 5.5 | 2026-04-13 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_fw: fix NULL pointer dereference on shared blocks The old-method path in f… |
CVE-2026-32894 | High | 7.1 | 2026-04-10 | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, an Insecure Direct Object Reference (IDOR) vulnerability in the gradebook result… |
CVE-2026-1584 | High | 7.5 | 2026-04-09 | A flaw was found in gnutls. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted ClientHello message with an invali… |
CVE-2026-31411 | Medium | 5.5 | 2026-04-08 | In the Linux kernel, the following vulnerability has been resolved: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() Reproducer available at… |
CVE-2026-34781 | Low | 2.8 | 2026-04-07 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.5, 40.8.5, 41.1.0, and 42.0.0-alpha.5, ap… |
CVE-2026-28390 | High | 7.5 | 2026-04-07 | Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen. Impact summary… |
CVE-2026-28389 | High | 7.5 | 2026-04-07 | Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen. Impact summary: Appl… |
CVE-2026-28388 | High | 7.5 | 2026-04-07 | Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CRL Number e… |
CVE-2026-5745 | Medium | 5.5 | 2026-04-07 | A flaw was found in libarchive. A NULL pointer dereference vulnerability exists in the ACL parsing logic, specifically within the archive_acl_from_text_nl() fu… |
CVE-2026-5590 | Medium | 6.4 | 2026-04-05 | A race condition during TCP connection teardown can cause tcp_recv() to operate on a connection that has already been released. If tcp_conn_search() returns NU… |
CVE-2026-31397 | High | 7.8 | 2026-04-03 | In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix use of NULL folio in move_pages_huge_pmd() move_pages_huge_pmd() hand… |
CVE-2026-31394 | Medium | 5.5 | 2026-04-03 | In the Linux kernel, the following vulnerability has been resolved: mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations ieee80211_chan_bw_ch… |
CVE-2026-23475 | Medium | 5.5 | 2026-04-03 | In the Linux kernel, the following vulnerability has been resolved: spi: fix statistics allocation The controller per-cpu statistics is not allocated until a… |
CVE-2026-23467 | Medium | 5.5 | 2026-04-03 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/dmc: Fix an unlikely NULL pointer deference at probe intel_dmc_update_dc6_allowe… |
CVE-2026-23460 | Medium | 5.5 | 2026-04-03 | In the Linux kernel, the following vulnerability has been resolved: net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect syzkaller repor… |
CVE-2026-23443 | Medium | 5.5 | 2026-04-03 | In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: Fix previous acpi_processor_errata_piix4() fix After commi f132e089fe89… |
CVE-2026-23442 | Medium | 5.5 | 2026-04-03 | In the Linux kernel, the following vulnerability has been resolved: ipv6: add NULL checks for idev in SRv6 paths __in6_dev_get() can return NULL when the dev… |
CVE-2026-23439 | Medium | 5.5 | 2026-04-03 | In the Linux kernel, the following vulnerability has been resolved: udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n When CONFIG_IPV6… |
CVE-2026-23438 | Medium | 5.5 | 2026-04-03 | In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: guard flow control update with global_tx_fc in buffer switching mvpp2_bm_swit… |
CVE-2026-23435 | Medium | 5.5 | 2026-04-03 | In the Linux kernel, the following vulnerability has been resolved: perf/x86: Move event pointer setup earlier in x86_pmu_enable() A production AMD EPYC syst… |
CVE-2026-23433 | Medium | 5.5 | 2026-04-03 | In the Linux kernel, the following vulnerability has been resolved: arm_mpam: Fix null pointer dereference when restoring bandwidth counters When an MSC supp… |
CVE-2026-34761 | Medium | 5.8 | 2026-04-02 | Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, Ella Core panics when processing a NGAP handover failure message. An attacker abl… |
CVE-2026-31931 | High | 7.5 | 2026-04-02 | Suricata is a network IDS, IPS and NSM engine. From version 8.0.0 to before version 8.0.4, use of the "tls.alpn" rule keyword can cause Suricata to crash with… |
CVE-2026-34874 | High | 7.5 | 2026-04-01 | An issue was discovered in Mbed TLS through 3.6.5 and 4.x through 4.0.0. There is a NULL pointer dereference in distinguished name parsing that allows an attac… |
CVE-2026-3776 | Medium | 5.5 | 2026-04-01 | The application does not validate the presence of required appearance (AP) data before accessing stamp annotation resources. When a PDF contains a stamp annota… |
CVE-2026-34552 | Medium | 6.2 | 2026-03-31 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is an Undefined Behavior (UB) issu… |
CVE-2026-34551 | Medium | 6.2 | 2026-03-31 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a null-pointer dereference (NPD) in CIcc… |
CVE-2026-34541 | Medium | 6.2 | 2026-03-31 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger Undefi… |
CVE-2026-32696 | Low | 3.1 | 2026-03-30 | NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. In NanoMQ version 0.24.6, after enabling auth.http_auth (HTTP authentication), when a cli… |
CVE-2026-33996 | Medium | 5.5 | 2026-03-27 | LibJWT is a C JSON Web Token Library. Starting in version 3.0.0 and prior to version 3.3.0, the JWK parsing for RSA-PSS did not protect against a NULL value wh… |
CVE-2026-33907 | Medium | 6.5 | 2026-03-27 | Ella Core is a 5G core designed for private networks. Versions prior to 1.7.0 panic when processing Authentication Response and Authentication Failure NAS mess… |
CVE-2026-33903 | Medium | 6.5 | 2026-03-27 | Ella Core is a 5G core designed for private networks. Versions prior to 1.7.0 panic when processing a specially crafted NGAP LocationReport message. An attacke… |
CVE-2026-0968 | Low | 3.1 | 2026-03-26 | A flaw was found in libssh in which a malicious SFTP (SSH File Transfer Protocol) server can exploit this by sending a malformed 'longname' field within an `SS… |
CVE-2026-23398 | Medium | 5.5 | 2026-03-26 | In the Linux kernel, the following vulnerability has been resolved: icmp: fix NULL pointer dereference in icmp_tag_validation() icmp_tag_validation() uncondi… |
CVE-2026-23396 | Medium | 5.5 | 2026-03-26 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL deref in mesh_matches_local() mesh_matches_local() unconditional… |
CVE-2026-4652 | High | 7.5 | 2026-03-26 | On a system exposing an NVMe/TCP target, a remote client can trigger a kernel panic by sending a CONNECT command for an I/O queue with a bogus or stale CNTLID… |
CVE-2026-29785 | High | 7.5 | 2026-03-25 | NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.14 and 2.12.5, if the nats-server has th… |
CVE-2026-23382 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them In commit 2ff5baa9b… |
CVE-2026-23381 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled When booting with the 'ipv… |
CVE-2026-23369 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" This reverts commit f7… |
CVE-2026-23366 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: drm/client: Do not destroy NULL modes 'modes' in drm_client_modeset_probe may fail to kca… |
CVE-2026-23353 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: ice: fix crash in ethtool offline loopback test Since the conversion of ice to page pool… |
CVE-2026-23349 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: HID: pidff: Fix condition effect bit clearing As reported by MPDarkGuy on discord, NULL p… |
CVE-2026-23341 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix crash when destroying a suspended hardware context If userspace issues… |
CVE-2026-23332 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: intel_pstate: Fix crash during turbo disable When the system is booted with kern… |
CVE-2026-23328 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix NULL pointer dereference of mgmt_chann mgmt_chann may be set to NULL i… |
CVE-2026-23309 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: tracing: Add NULL pointer check to trigger_data_free() If trigger_data_alloc() fails and… |
CVE-2026-23304 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() l3mdev_master_dev_rcu() can return N… |
CVE-2026-23300 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop When a standalone I… |
CVE-2026-23293 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled When booting with the 'ipv6… |
CVE-2026-23286 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: atm: lec: fix null-ptr-deref in lec_arp_clear_vccs syzkaller reported a null-ptr-deref in… |
CVE-2026-23285 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: drbd: fix null-pointer dereference on local read error In drbd_request_endio(), READ_COMP… |
CVE-2026-23279 | Medium | 5.5 | 2026-03-25 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() In mesh_rx_csa_frame(… |
CVE-2026-28886 | Medium | 5.9 | 2026-03-25 | A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS S… |
CVE-2026-32854 | High | 7.5 | 2026-03-24 | LibVNCServer versions 0.9.15 and prior (fixed in commit dc78dee) contain null pointer dereference vulnerabilities in the HTTP proxy handlers within httpProcess… |
CVE-2026-27651 | High | 7.5 | 2026-03-24 | When the ngx_mail_auth_http_module module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests can cause worker processes to terminate. This iss… |
CVE-2026-4751 | Medium | 5.3 | 2026-03-24 | NULL Pointer Dereference vulnerability in tmate-io tmate.This issue affects tmate: before 2.4.0. |
CVE-2026-33853 | Medium | 5.5 | 2026-03-24 | NULL Pointer Dereference vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: before 7.1.2-10. |
CVE-2026-4743 | | 2026-03-24 | NULL Pointer Dereference vulnerability in taurusxin ncmdump (src/utils modules). This vulnerability is associated with program files cJSON.Cpp. This issue… | |
CVE-2026-33283 | Medium | 6.5 | 2026-03-24 | Ella Core is a 5G core designed for private networks. Versions prior to 1.6.0 panic when processing malformed UL NAS Transport NAS messages without a Request T… |
CVE-2026-33282 | High | 7.5 | 2026-03-24 | Ella Core is a 5G core designed for private networks. Versions prior to 1.6.0 panic when processing a malformed NGAP LocationReport message with `ue-presence-… |
CVE-2026-25075 | High | 7.5 | 2026-03-23 | strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser that allows unauthenticated remote attackers to… |
CVE-2026-26829 | High | 7.5 | 2026-03-23 | A NULL pointer dereference in the safe_atou64 function (src/misc.c) of owntone-server through commit c4d57aa allows attackers to cause a Denial of Service (DoS… |
CVE-2026-26828 | High | 7.5 | 2026-03-23 | A NULL pointer dereference in the daap_reply_playlists function (src/httpd_daap.c) of owntone-server commit 3d1652d allows attackers to cause a Denial of Servi… |
CVE-2026-33179 | Medium | 5.5 | 2026-03-20 | libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a NULL pointer dereference and memory leak in fuse_uri… |
CVE-2026-33164 | High | 7.5 | 2026-03-20 | libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.17, a malformed H.265 PPS NAL unit causes a segmentation fault in pic_… |
CVE-2026-23277 | Medium | 5.5 | 2026-03-20 | In the Linux kernel, the following vulnerability has been resolved: net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit teql_ma… |
CVE-2026-33064 | High | 7.5 | 2026-03-20 | Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks. Versions prior to 1.4.2 are vulnerable to procedure panic caus… |
CVE-2026-33063 | High | 7.5 | 2026-03-20 | free5GC is an open source 5G core network. free5GC AUSF prior to version 1.4.2 has is an Improper Null Check vulnerability leading to Denial of Service. All de… |
CVE-2026-31973 | High | 7.5 | 2026-03-18 | SAMtools is a program for reading, manipulating and writing bioinformatics file formats. Starting in version 1.17, in the cram-size command, used to write info… |
CVE-2026-31964 | High | 7.5 | 2026-03-18 | HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data using a variety o… |
CVE-2026-23251 | Medium | 5.5 | 2026-03-18 | In the Linux kernel, the following vulnerability has been resolved: xfs: only call xf{array,blob}_destroy if we have a valid pointer Only call the xfarray an… |
CVE-2026-23250 | Medium | 5.5 | 2026-03-18 | In the Linux kernel, the following vulnerability has been resolved: xfs: check return value of xchk_scrub_create_subord Fix this function to return NULL inst… |
CVE-2026-23249 | Medium | 5.5 | 2026-03-18 | In the Linux kernel, the following vulnerability has been resolved: xfs: check for deleted cursors when revalidating two btrees The free space and inode btre… |
CVE-2026-23242 | High | 7.5 | 2026-03-18 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix potential NULL pointer dereference in header processing If siw_get_hdr() re… |
CVE-2025-13406 | | 2026-03-17 | NULL Pointer Dereference vulnerability in Softing Industrial Automation GmbH smartLink SW-HT (Webserver modules) allows HTTP DoS.This issue affects smartLink S… | |
CVE-2026-32778 | Low | 2.9 | 2026-03-16 | libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition. |
CVE-2026-32776 | Medium | 4.0 | 2026-03-16 | libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content. |
CVE-2026-28522 | Medium | 6.5 | 2026-03-16 | arduino-TuyaOpen before version 1.2.1 contains a null pointer dereference vulnerability in the WiFiUDP component. An attacker on the same local area network ca… |
CVE-2026-32249 | Medium | 5.3 | 2026-03-12 | Vim is an open source, command line text editor. From 9.1.0011 to before 9.2.0137, Vim's NFA regex compiler, when encountering a collection containing a combin… |
CVE-2026-27218 | Medium | 5.5 | 2026-03-10 | Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An… |
CVE-2026-27217 | Medium | 5.5 | 2026-03-10 | Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An… |
CVE-2026-27215 | Medium | 5.5 | 2026-03-10 | Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An… |
CVE-2026-27214 | Medium | 5.5 | 2026-03-10 | Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An… |
CVE-2026-21364 | Medium | 5.5 | 2026-03-10 | Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An… |
CVE-2026-21363 | Medium | 5.5 | 2026-03-10 | Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An… |
CVE-2026-31792 | High | 7.8 | 2026-03-10 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a null pointer dereference in CIccTagXm… |
CVE-2026-30986 | Medium | 5.5 | 2026-03-10 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-based buffer overflow write in C… |
CVE-2026-25168 | Medium | 6.2 | 2026-03-10 | Null pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to deny service locally. |
CVE-2026-25165 | High | 7.8 | 2026-03-10 | Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally. |