CWE-476: NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.
Also known as NPD, null deref, NPE.
A kind of CWE-710 Improper Adherence to Coding Standards.
From the CWE List. © The MITRE Corporation.
Newest
- go-vikunja vikunja Vikunja 0.24.0 before 2.7.1 Denial of Service via Nil Bucket Filter 5.1 Medium
- fraunhoferhhi vvdec Fraunhofer HHI VVdeC through 3.2.1 NULL Pointer Dereference via InterPrediction::xPredInterBlk 6.8 Medium
- siyuan-note siyuan SiYuan before 3.8.9 Nil Pointer Dereference DoS via MCP resources/read 6.9 Medium
- zephyrproject zephyr NULL pointer dereference in the Zephyr HTTP/2 server when a header block is completed by a CONTINUATION frame 7.5 High
- samsung exynos 1280, exynos 1330, exynos 1380 +6 more +8 more In the NR RRC component, improper handling of messages before authentication triggers a data... No score
- samsung exynos 1480, exynos 2400 +1 more In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an... No score
- moby buildkit Possible panic from Git source resolver 6.7 Medium
- mongodb c driver MongoDB C Driver Modern GridFS mongoc_gridfs_bucket_download_to_stream() Aborts Application on Malformed GridFS Metadata 8.7 High
- elastic packetbeat NULL Pointer Dereference in Packetbeat Leading to Denial of Service 6.5 Medium
- hdfgroup hdf5 NULL Pointer Dereference in H5HL_unprotect via Corrupted File 5.4 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series processors, epyc™ 4005 series processors +38 more +40 more A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and... 6.9 Medium
- freerdp FreeRDP before 3.32.2 Denial of Service via RD Gateway extended-auth packet 5.3 Medium
- freerdp FreeRDP before 3.32.2 X11 Client Crash via Zero-Width RDPGFX ResetGraphics 7.1 High
- eclipse foundation threadx NULL pointer dereference in the BSD raw IPv6 send path when the destination table is full 8.2 High
- eclipse foundation threadx netx duo NULL pointer dereference in ICMPv6 Packet Too Big processing when the destination table is full 8.7 High
- the sleuth kit sleuth kit The Sleuth Kit through 4.15.0 NULL Pointer Dereference via decmpfs LZVN Decompression 6.8 Medium
- h2o picotls Picotls has NULL pointer dereference during handshake, when running as a client 6.5 Medium
- esp32async espasyncwebserver ESPAsyncWebServer multipart parser has null-pointer write 7.5 High
- mouse07410 asn1c asn1c: ASAN crash with decode of open types 0.0 None
- nezhahq nezha Nezha 2.0.0 before 2.4.0 Startup NULL Pointer Dereference via Orphaned Service History 6.0 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 more Gst-plugins-base: gst-plugins-base: null-pointer dereference in mdvdsub subtitle parser via missing closing-brace check 6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 more Gst-plugins-bad: gst-plugins-bad: null pointer dereference in h.264 mvc sps cleanup during parse failure 6.5 Medium
- dlundquist sniproxy sniproxy through 0.7.0 NULL Pointer Dereference via resolv_cancel() 8.7 High
- qt NULL pointer dereference vulnerability in QCborValue to JSON conversion impacts Qt 4.3 Medium
- digitalbazaar forge Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message 7.5 High
- digitalbazaar forge Forge: TLS client crash when the server sends no certificate 5.9 Medium
- rt-labs p-net NULL pointer dereference on implicit read of user specific record index 8.7 High
- rt-labs p-net NULL pointer dereference on implicit read of AR specific record index 8.7 High
- red hat directory server 11, directory server 12, directory server 13 +5 more +7 more 389-ds-base: 389-ds-base: null pointer dereference via modifydn using an attribute's schema alias name causes denial of service 6.5 Medium
- libexpat libexpat through 2.9.0 NULL Pointer Dereference via External Entity Subparser 8.2 High
- asterisk, asterisk certified-asterisk +1 more Asterisk: NULL Pointer Dereference in HTTP AMI Digest Authentication 7.5 High
- tanium enforce Tanium addressed a denial of service vulnerability in Enforce. 6.5 Medium
- watchguard fireware os Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service 8.7 High
- netsurf-browser libcss libcss through 0.9.2 NULL Pointer Dereference via Media-Query Parser 7.1 High
- apple ipados, macos, tvos +4 more +6 more A null pointer dereference was addressed with improved input validation. This issue is fixed in... 7.5 High
- apple ipados, ios and ipados, iphone os +2 more A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 26... 6.5 Medium
- apple ipados, macos, tvos +4 more +6 more A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 26... 4.6 Medium
- onnx ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attribute 6.2 Medium
- zephyrproject zephyr Bluetooth Classic HFP AG wipes an object still linked in the SDP request list on connect failure, causing a NULL dereference 6.5 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +3 more +5 more Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemon 5.5 Medium
- qt Null pointer dereference vulnerability in QNetworkAccessManager impacts Qt 2.1 Low
- rt-labs ab soem Null Pointer Dereference in Mailbox Error Handling 6.5 Medium
- imagemagick ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Null Pointer Dereference in DJVU Decoder 6.3 Medium
- kiloview e3 firmware Kiloview E3 NDI Encoder NULL Pointer Dereference 6.9 Medium
- apache software foundation traffic server Apache Traffic Server: Nullptr dereference in net_write_io on a POST half-close with chunked response 8.2 High
- zephyrproject zephyr NULL pointer dereference in the MCTP I2C+GPIO target binding triggerable by a peer I2C controller 7.1 High
- cisco telepresence video communication server (vcs) expressway Cisco Expressway Series Software Hardening Release: October 2026 - NULL Pointer Vulnerabilities 7.5 High
- cisco cyber vision, open source snort3, secure firewall threat defense (ftd) software +2 more +4 more Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities 5.8 Medium
- isc bind 9 Named may terminate unexpectedly when a redirect zone is used with strict QNAME minimization 7.5 High
- apache software foundation brpc Apache bRPC: Null pointer dereference in MySQL reply parser leading to client crash 6.5 Medium
- Show olderLoading…