CWE-476: NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.
Also known as NPD, null deref, NPE.
A kind of CWE-710 Improper Adherence to Coding Standards.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +8 more +10 moreWindows SMB Server Network Transport Driver (srvnet.sys) Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreWindows Biometric Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability6.5 Medium
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows server 2025 +3 more +5 moreWindows Kerberos Denial of Service Vulnerability7.5 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +8 more +10 moreWindows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability7.5 High
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreA NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all...2.5 Low
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreNull Pointer Dereference in MongoDB Server 2dsphere Index Key Generation Leads to Denial of Service7.1 High
- red hat directory server 11.5 e4s for rhel 8, directory server 11.7 e4s for rhel 8, directory server 11.9 for rhel 8 +20 more +22 more389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_search7.5 High
- strongswanstrongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute...7.5 High
- strongswanstrongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin.5.9 Medium
- px4 px4-autopilotPX4 Autopilot through 1.17.0 Null Pointer Dereference via param select7.1 High
- passmark software burnintest, osforensics, performancetest +2 morePassMark PerformanceTest, BurnInTest, and OSForensics Kernel Null Pointer Dereference via DirectIo64.sys IOCTL8.4 High
- ibm iIBM i is Affected By Multiple Vulnerabilities in Debug Server6.5 Medium
- No product listedAn issue in Free5GC v.4.2.2 allows a remote attacker to cause a denial of service via the UPF...7.5 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreGstreamer1-plugins-base: gstreamer: null/invalid-pointer dereference in gst_rtsp_message_parse_auth_credentials() when parsing a crafted digest authorization/www-authenticate header7.5 High
- hitachi energy rtu500 series cmu firmwareRTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short...5.9 Medium
- f5 nginx javascriptNGINX ngx_http_js_module vulnerability8.7 High
- samsung open source mtowerNULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation....5.5 Medium
flvmetaDebianFLVMeta AMF Object Parsing amf.c amf_object_get null pointer dereference5.3 Medium- armink struct2jsonarmink struct2json JSON Deserialization s2jdef.h S2J_STRUCT_GET_string_ELEMENT null pointer dereference6.9 Medium
- No product listedOpen5GS Transfer Endpoint namf-handler.c null pointer dereference5.3 Medium
- tp-link system inc. tl-wr841n v14Pre-Authentication NULL Pointer Dereference in UPnP SOAP State Variable Query Processing in TP-Link TL-WR841N5.3 Medium
- tp-link system inc. tl-wr841n v14Pre-Authentication NULL Pointer Dereference in UPnP SOAP Action Request Processing in TP-Link TL-WR841N5.3 Medium
- mongodb bi connectorMongoDB Connector for BI Improper Error Handling During Schema Sampling May Cause Loss of SQL Service8.3 High
- planet technology corp. gs-4210-16p2s v3PLANET GS-4210-16P2S V3 Stack Buffer Overflow and NULL Pointer Dereference via dispatcher.cgi RADIUS Handlers6.9 Medium
- planet technology corp. gs-4210-16p2s v3PLANET GS-4210-16P2S V3 Null Pointer Dereference DoS via dispatcher.cgi web_poe_alive_rmtip_post6.9 Medium
- envoyproxy envoyEnvoy ext_authz: request `:path` pseudoheader dereferenced w/o null check7.5 High
- envoyproxy envoyEnvoy: HTTP/3 connection pool selection null-derefs in ProdClusterManagerFactory::allocateConnPool when transport_socket_options is null5.9 Medium
- wazuhWazuh agent enrollment NULL pointer dereference via malformed manager response5.3 Medium
ffmpegDebian,ffmpeg-8openSUSE,ffmpeg-9openSUSE +1 more +3 moreA NULL pointer dereference in the get_min_buffer_size function (/libswscale/slice.c) of FFmpeg N...7.5 High- No product listedA NULL pointer dereference in the CDR processing path of free5gc v4.0.1 allows attackers to cause...7.5 High
- No product listedA NULL pointer dereference in the UDMC registration handler component of free5gc v4.0.1 allows...7.5 High
- No product listedA NULL pointer dereference in the AMF NGAP Dispatcher component of free5gc v4.0.1 allows...7.5 High
- No product listedccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a null pointer dereference vulnerability...7.5 High
- No product listedA null pointer dereference vulnerability exists in the server-side session management logic of...7.5 High
- No product listedccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a null pointer dereference vulnerability...7.5 High
stomperUbuntuIn Stomper 5e2741e when a client sends a SEND frame missing the destination header field, the...7.5 High- apple ipados, ios and ipados, iphone os +2 moreA null pointer dereference was addressed with improved input validation. This issue is fixed in...5.5 Medium
- adobe substance 3d designerSubstance3D - Designer | NULL Pointer Dereference (CWE-476)5.5 Medium
- nvidia dgx spark, dgx spark uefi +1 moreNVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker...8.2 High
- zephyrproject zephyrNULL-pointer dereference in Zephyr OCPP CALLRESULT parsing via unchecked strtok_r/atoi5.9 Medium
- opensslInvalid Pointer Dereference in CMP Server via Crafted protectionAlg7.5 High
- opensslRPK Server Signature Algorithm Selection Can Dereference a Missing Certificate7.5 High
- zephyrproject zephyrBluetooth HAS: NULL-pointer dereference DoS when a bonded peer reconnects before bt_has_register5.3 Medium
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models Pre-Authentication NULL Pointer Dereference via setget.cgi8.7 High
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models NULL Pointer Dereference via formlogout6.9 Medium
- ggml-org llama.cppggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp graph_compute null pointer dereference6.9 Medium
- getkin kin-openapikin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoS7.5 High
- tp-link systems inc. tl-mr6400 v7.0Unauthenticated Denial of Service via Null Pointer Dereference in HTTP Request Parsing7.1 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS7.5 High
- Show moreLoading…