CWE-476: NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.
Also known as NPD, null deref, NPE.
A kind of CWE-710 Improper Adherence to Coding Standards.
From the CWE List. © The MITRE Corporation.
Newest
- linux, linux kernel +1 morebpf: Mark sched_process_wait argument as nullable5.5 Medium
- No product listedEspruino 2v29 (commit bffc6d0) contains a NULL pointer dereference vulnerability in...6.2 Medium
openexrDebianOpenEXR 3.4.14 contains a NULL Pointer Dereference in the C++ attribute parsing path. A specially...5.5 Mediumlibde265Debian,rootio-libde265Root +1 morelibde265 commit 4d45a6b contains a NULL pointer dereference vulnerability in the NAL parsing path...7.5 HighpgbouncerAzure LinuxNULL pointer dereference in SCRAM client-final-message parsing in PgBouncer7.5 High- asr crane，falconDeference after null check in as_rrc7.4 High
- adobe indesign desktopInDesign Desktop | NULL Pointer Dereference (CWE-476)5.5 Medium
- adobe indesign desktopInDesign Desktop | NULL Pointer Dereference (CWE-476)5.5 Medium
- notepad-plus-plusNotepad++: Null pointer dereference in NPPM_SAVESESSION message handler causes crash (DoS)5.5 Medium
gpacUbuntuA NULL pointer dereference vulnerability exists in the gf_sg_vrml_field_clone() function of GPAC...5.5 Medium- oisf suricataSuricata datasets: NULL pointer dereference in JSON/NDJSON dataset loading3.3 Low
- winfspWinFsp through 2.2.26215 NULL Pointer Dereference via Fast I/O6.8 Medium
- imagemagickImageMagick before 7.1.2-31 Null Pointer Dereference via PNM2.3 Low
- freedesktop popplerFreedesktop Poppler JBIG2Stream.cc rewind null pointer dereference5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreLibxml2: libxml2: null pointer dereference parsing nextcatalog without catalog attribute5.5 Medium
- No product listedOpen5GS PFCP types.c ogs_pfcp_parse_volume_measurement null pointer dereference7.1 High
- artifex mupdfArtifex MuPDF PDF Xref Loading pdf-stream.c pdf_open_filter null pointer dereference5.3 Medium
- control id idsecureControl iD iDSecure Unauthenticated Denial of Service7.5 High
- isc bind 9Unauthenticated remote crash of named via a single DoH SIG(0) request7.5 High
- No product listedA Null Pointer Dereference in the mk_sched_event_close function (mk_server/mk_scheduler.c) of...7.5 High
- netcore nr255-vNetcore NR255-V 1.5.130703 NULL Pointer Dereference in route_policy_add.cgi via Missing exit_port6.9 Medium
- netcore nr255-vNetcore NR255-V 1.5.130703 NULL Pointer Dereference via Unchecked atoi() in QoS Setter Handlers6.9 Medium
- freerdpFreeRDP before 3.31.0 NULL Pointer Dereference via NSCodec7.1 High
- mozilla firefox, thunderbird +1 moreSpoofing issue due to invalid pointer in the Graphics component9.1 Critical
- gnu binutilsGNU Binutils Dynamic Relocation Allocation elfxx-x86.c elf_x86_allocate_dynrelocs null pointer dereference4.8 Medium
- gnu binutilsGNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_section_index null pointer dereference4.8 Medium
- gnu binutilsGNU Binutils elflink.c elf_link_add_object_symbols null pointer dereference4.8 Medium
- gnu binutilsGNU Binutils Eh Frame elf-eh-frame.c _bfd_elf_eh_frame_section_offset null pointer dereference4.8 Medium
- apple ipados, macos, visionos +3 more +5 moreA null pointer dereference was addressed with improved input validation. This issue is fixed in...6.5 Medium
- ibm db2IBM® Db2® federated server could allow a remote authenticated attacker to cause a denial of service due to a null pointer dereference6.5 Medium
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreSssd: sssd: local denial of service due to null pointer dereference in pam responder5.5 Medium
gpacUbuntuGPAC MP4Box base_scenegraph.c gf_node_list_get_child null pointer dereference5.3 Medium- mattermost, mattermost server +1 moreUnauthenticated webhook request with null notification entry could crash the Microsoft Calendar plugin.5.3 Medium
- gnu libredwgGNU libredwg Layer Encoding dwg.spec DWG_TABLE null pointer dereference4.8 Medium
gpacUbuntuGPAC MP4Box vrml_tools.c null pointer dereference4.8 Medium- samsung exynos 850 firmwareAn issue was discovered in NR RRC and L2 in Samsung Mobile Processor, Wearable Processor, and...3.5 Low
- zephyrproject zephyrNULL pointer dereference in Zephyr MQTT-SN client when removing a non-responsive gateway7.5 High
gpacUbuntuGPAC MP4Box base_scenegraph.c gf_node_list_add_child null pointer dereference4.8 MediumgpacUbuntuGPAC MP4Box vrml_tools.c gf_sg_mfurl_del null pointer dereference4.8 Medium- systerel s2opcS2OPC through 1.7.3 NULL Pointer Dereference in alloc_notification_message_items()6.0 Medium
- iobit uninstallerIOBit Uninstaller IOCTL Dispatch IURegistryFilter.sys sub_11838 null pointer dereference6.8 Medium
- oisf suricataSuricata lua/tls: null dereference in TlsGetCertInfo7.5 High
mrubyDebianA NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An...6.5 Medium- mrubycmrubyc through 4.0.0 NULL Pointer Dereference via OP_ENTER6.9 Medium
- microsoft skype for business server 2015 cu13, skype for business server 2019 cu8, skype for business server subscription edition cu1 +2 more +4 moreSkype for Business and Lync Denial of Service Vulnerability6.5 Medium
- microsoft word, 365 apps, 365 apps for enterprise +10 more +12 moreMicrosoft Office Word Remote Code Execution Vulnerability8.8 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +8 more +10 moreWindows Schannel Denial of Service Vulnerability5.3 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreVirtual Hard Disk (VHD) Miniport Driver Denial of Service Vulnerability7.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Active Directory Domain Services Denial of Service Vulnerability6.5 Medium
- Show moreLoading…