CWE-476: NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.
Also known as NPD, null deref, NPE.
A kind of CWE-710 Improper Adherence to Coding Standards.
From the CWE List. © The MITRE Corporation.
Newest
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS4.7 Medium
- libeventLibevent: Null Pointer Dereference in `evws_new_session`5.7 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreIpa: freeipa: null pointer dereference in `ipa-enrollment` extended operation (`join_oid`) via missing request value6.5 Medium
- tp-link systems inc archer mr600 v2, tp-link systems inc. tl-mr100 v3.2, tl-mr6400 v8.0 +5 more +7 moreUnauthenticated Denial-of-Service Vulnerability in HTTP Service in TP-Link TL-MR100, TL-MR150, TL-MR6400 and Archer MR6007.1 High
- wiresharkNULL Pointer Dereference in Wireshark7.5 High
- wiresharkNULL Pointer Dereference in Wireshark4.7 Medium
- wiresharkNULL Pointer Dereference in Wireshark5.5 Medium
- wiresharkNULL Pointer Dereference in Wireshark4.7 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS6.5 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS5.3 Medium
- wekanWeKan Board Export REST Endpoints: NULL Pointer Dereference on Invalid authToken Leads to Uncaught Exception / Remote Denial of Service6.5 Medium
- tp-link tapo c100 firmware, tapo c101 firmware, tp-link systems inc. tapo c100 v5 +1 more +3 moreRTSP Null Pointer Dereference Denial-of-Service Vulnerability on TP-Link Tapo C100 and C1017.1 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS7.5 High
- red hat jboss enterprise application platform 7, jboss enterprise application platform 8, jboss enterprise application platform expansion pack +10 more +12 moreModcluster-core: mod_cluster advertise listener: unauthenticated dos via crafted multicast datagram4.3 Medium
- busyboxBusyBox FEATURE_WGET_TIMEOUT wget.c null pointer dereference4.8 Medium
- equinor resdataresdata insufficiently validates untrusted GRDECL files9.8 Critical
- knmi adaguc-serveradaguc-server GeoJSON coordinate parser (CConvertGeoJSON.cpp) vulnerable to out-of-bounds read and NULL pointer dereference4.0 Medium
- totolink ex1200lTOTOLINK EX1200L cstecgi.cgi setWizardCfg null pointer dereference7.1 High
- totolink ex1200lTOTOLINK EX1200L Password Configuration cstecgi.cgi setPasswordCfg null pointer dereference7.1 High
- huawei harmonyosNull pointer dereference issue in the image codec module. Impact: Successful exploitation of this...4.0 Medium
- huawei harmonyosNull pointer dereference issue in the image codec module. Impact: Successful exploitation of this...4.0 Medium
- linuxnet/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked7.8 High
- linuxnet/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked8.2 High
- linuxfhandle: reject detached mounts in capable_wrt_mount()7.8 High
- absolute secure accessCVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure...6.9 Medium
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreImproper Input Validation in MongoDB Query Planner Leads to Denial of Service6.0 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2016 +8 more +10 moreWindows iSCSI Target Service Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +12 more +14 moreWindows Graphics Kernel Denial of Service Vulnerability6.8 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreMicrosoft Remote Registry Service Denial of Service Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreMicrosoft Remote Registry Service Denial of Service Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows TCP/IP Denial of Service Vulnerability7.5 High
- adobe c2pa, c2pa-web, c2patool +3 more +5 moreCAI Content Credentials | NULL Pointer Dereference (CWE-476)7.5 High
- intel proset\/wireless wifiNull pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring...7.1 High
- intel proset\/wireless wifiNull pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring...7.1 High
- intel proset\/wireless wifiNull pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring...8.3 High
- rapid7 velociraptorVelociraptor server crash via the SetPassword API6.5 Medium
- zephyrproject zephyrNULL pointer dereference in USB DFU device_next download handler (handle_download)4.6 Medium
- red hat enterprise linux 7, enterprise linux 8, enterprise linux 9 +2 moreShim/dp.c library: null-pointer dereference in is_removable_media_path() when devicepathtostr() returns null3.9 Low
- zephyrproject zephyrNULL-pointer dereference in UpdateHub OTA agent on empty inner metadata array (remote DoS)7.5 High
- op-tee optee osOP-TEE OS 4.10.0 NULL Pointer Dereference DoS via Widevine PTA open_session5.7 Medium
- linuxs390/checksum: Fix csum_partial() without vector facility9.8 Critical
- linuxfirewire: net: Fix fragmented datagram reassembly8.8 High
- linuxdrm/xe/vf: Add drm_dev guards when detaching CCS read/write buffers7.8 High
- linuxlibceph: guard missing CRUSH type name lookup7.5 High
- linuxnet/af_iucv: fix NULL deref in afiucv_hs_callback_syn()7.5 High
- linuxnet: gro: fix double aggregation of flush-marked skbs9.8 Critical
- fastschemafastschema - Unauthenticated NULL Pointer Dereference DoS in Account Recovery Endpoint7.5 High
- jonasbn crypt::openssl::pkcs12Crypt::OpenSSL::PKCS12 versions before 1.98 for Perl allow a NULL pointer dereference in print_attribute via a zero length BMPSTRING attribute7.5 High
- hashicorp consul, consul enterprise +1 moreAuthenticated denial of service in Consul Enterprise-to-Community Edition downgrade path5.3 Medium
- 0x5t4l1n nextor ip changerNexTOR_IP_CHANGER has PATH Injection Leading to Arbitrary Command Execution7.8 High
- Show moreLoading…