CWE-476: NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.
Also known as NPD, null deref, NPE.
A kind of CWE-710 Improper Adherence to Coding Standards.
From the CWE List. © The MITRE Corporation.
Newest
- linux, linux kernel +1 morerxrpc: Only put the call ref if one was acquired7.5 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreHID: alps: fix NULL pointer dereference in alps_raw_event()5.5 Medium
- linux, linux kernel +1 moreALSA: usx2y: us144mkii: fix NULL deref on missing interface 04.6 Medium
- linux, linux kernel +1 moreusb: gadget: renesas_usb3: validate endpoint index in standard request handlers5.5 Medium
- linux, linux kernel +1 morearm64: mm: Handle invalid large leaf mappings correctly7.5 High
- linux, linux kernel +1 moremedia: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections5.5 Medium
- linux, linux kernel +1 moreKVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock5.5 Medium
- linux, linux kernel +1 morewireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit5.5 Medium
- linux, linux kernel +1 morenilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map5.5 Medium
- linux, linux kernel +1 moredrm/mediatek: dsi: Store driver data before invoking mipi_dsi_host_register5.5 Medium
- linux, linux kernel +1 moreLoongArch: Fix missing NULL checks for kstrdup()5.5 Medium
- linux, linux kernel +1 morei2c: cp2615: fix serial string NULL-deref at probe5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: bonding: fix NULL deref in bond_debug_rlb_hash_show5.5 Medium
- linux, linux kernel +1 morefirmware: arm_scmi: Fix NULL dereference on notify error path5.5 Medium
- linux, linux kernel +1 moredrm/i915/gt: Check set_default_submission() before deferencing5.5 Medium
- linux, linux kernel +1 morebtrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreaf_key: validate families in pfkey_send_migrate()5.5 Medium
- linux, linux kernel +1 moreBluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb5.5 Medium
- linux, linux kernel +1 moretracing: Drain deferred trigger frees if kthread creation fails5.5 Medium
- linux, linux kernel +1 moreksmbd: fix memory leaks and NULL deref in smb2_lock()7.5 High
- linux, linux kernel +1 moremm/damon/sysfs: check contexts->nr before accessing contexts_arr[0]5.5 Medium
- linux, linux kernel +1 moremm/damon/sysfs: check contexts->nr in repeat_call_fn5.5 Medium
- linux, linux kernel +1 morexfs: avoid dereferencing log items after push callbacks7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreext4: publish jinode after initialization8.8 High
- linux, linux kernel +1 moremm/damon/core: avoid use of half-online-committed context5.5 Medium
- linux, linux kernel +1 morenetfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators5.5 Medium
- linux, linux kernel +1 morenetfs: Fix NULL pointer dereference in netfs_unbuffered_write() on retry5.5 Medium
- linux, linux kernel +1 moredmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc()9.8 Critical
- powerdns recursorInsufficient validation of cookie reply5.9 Medium
- powerdns recursorInsufficient validation of zonemd record4.4 Medium
- powerdns recursorNull pointer dereference in RPZ transfer4.4 Medium
- gnu binutils, red hat enterprise linux 10, enterprise linux 6 +8 more +10 moreBinutils: binutils: denial of service via crafted elf file5.0 Medium
- mozilla firefox, thunderbird +1 moreInvalid pointer in the Audio/Video: Playback component5.3 Medium
- firebirdsql firebirdFirebird Null Pointer Dereference via CryptCallback causes DOS8.2 High
- firebirdsql firebirdFirebird has potential server crash via null pointer dereference when processing op_slice packet7.5 High
fioAzure LinuxA NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing...7.5 High- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.0 High
- microsoft windows 11 version 26h1, windows 11 26h1 +1 moreWindows Redirected Drive Buffering System Denial of Service Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability7.5 High
- jqlang jqjq: Missing runtime type checks for _strindices lead to crash and limited memory disclosure6.1 Medium
- linux, linux kernel +1 morerds: ib: reject FRMR registration before IB connection is established5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet/sched: cls_flow: fix NULL pointer dereference on shared blocks5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet/sched: cls_fw: fix NULL pointer dereference on shared blocks5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: nf_conntrack_expect: use expect->helper9.8 Critical
- gonitro nitro pdf proNitro PDF Pro for Windows 14.41.1.4 contains a NULL pointer dereference vulnerability in the...7.5 High
- gonitro nitro pdf proA NULL pointer dereference in Nitro PDF Pro for Windows v14.41.1.4 allows attackers to cause a...7.5 High
- chamilo lms, chamilo-lms +1 moreChamilo LMS has an IDOR in Gradebook Allows Cross-Course Deletion of Any Student's Grade Result7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: atm: fix crash due to unvalidated vcc pointer in sigd_send()5.5 Medium
- electronElectron crashes in clipboard.readImage() on malformed clipboard image data2.8 Low
- Show moreLoading…