CWE-476: NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.
Also known as NPD, null deref, NPE.
A kind of CWE-710 Improper Adherence to Coding Standards.
From the CWE List. © The MITRE Corporation.
Newest
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: A specific BGP FlowSpec update causes an rpd crash when BGP FlowSpec import policy is used8.7 High
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when ephemeral configuration is used8.7 High
- juniper networks junos osJunos OS: Malformed packet causes pkid denial of service when certificate re-enrollment is used8.7 High
- nezhahq nezhaNezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenant6.5 Medium
- serge1 elfioELFIO through 3.12 NULL Pointer Dereference via relocation_section_accessor get_entry6.8 Medium
- brechtsanders xlsxioxlsxio through 0.2.37 NULL Pointer Dereference via Worksheet Relationship Without Id6.8 Medium
- the libreswan project libreswanNull Pointer Dereference in PKCS#7 bundle with no certificates7.5 High
- the libreswan project libreswanIKEv2 pre-authentication Null Pointer Dereference in EAP code7.5 High
- adobe substance 3d designerSubstance3D - Designer | NULL Pointer Dereference (CWE-476)5.5 Medium
- adobe substance 3d designerSubstance3D - Designer | NULL Pointer Dereference (CWE-476)5.5 Medium
- adobe substance 3d designerSubstance3D - Designer | NULL Pointer Dereference (CWE-476)5.5 Medium
- adobe substance 3d designerSubstance3D - Designer | NULL Pointer Dereference (CWE-476)5.5 Medium
- adobe photoshopPhotoshop Desktop | NULL Pointer Dereference (CWE-476)5.5 Medium
- adobe photoshopPhotoshop Desktop | NULL Pointer Dereference (CWE-476)5.5 Medium
- adobe substance 3d stagerSubstance3D - Stager | NULL Pointer Dereference (CWE-476)5.5 Medium
- adobe dimensionDimension | NULL Pointer Dereference (CWE-476)5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability7.8 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreWindows MIDI Service Module Elevation of Privileges Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Installer Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +11 more +13 moreWindows DHCP Server Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +14 more +16 moreWindows Hyper-V Denial of Service Vulnerability6.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +8 more +10 moreMicrosoft Office Excel Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Message Queuing Queue Manager Denial of Service Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Hyper-V Denial of Service Vulnerability6.5 Medium
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +14 more +16 moreWindows Active Directory Domain Services Denial of Service Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Audio Service Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreMicrosoft Windows VMSwitch Denial of Service Vulnerability5.6 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Clipboard Server Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Schannel Elevation of Privilege Vulnerability7.8 High
- adobe framemaker 2022, framemaker 2026 +1 moreAdobe Framemaker | NULL Pointer Dereference (CWE-476)5.5 Medium
- mongodb server, mongodb, inc. mongodb server +1 moreCollection validators using collation-accepting expressions can crash MongoDB Server on insert7.1 High
- commvault cloudCvFWD Null Pointer Dereference7.1 High
- marcopiovanello yt-dlp-web-uiyt-dlp-web-ui through 4.0.0 NULL Pointer Dereference DoS via Service.Formats8.7 High
- freerdpFreeRDP 2.3.0 before 3.32.0 NULL Pointer Dereference via RD Gateway Close Channel Packet7.1 High
- freerdpFreeRDP 3.27.1 before 3.32.0 NULL Pointer Dereference via Cache Bitmap V3 Order7.1 High
- freerdpFreeRDP 3.0.0-beta4 before 3.32.0 NULL Pointer Crash via ARM Response6.0 Medium
- wavlink wl-wn592ax6Wavlink WL-WN592AX6 upload.cgi main null pointer dereference6.9 Medium
mp4v2Ubuntump4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks() in src...7.5 High- imagemagickImageMagick 7.1.0-20 before 7.1.2-32 Use After Free via -fx Option2.0 Low
- imagemagickImageMagick 7.1.1-31 before 7.1.2-32 Null Pointer Dereference in PostScript Decoder6.3 Medium
- imagemagickImageMagick 7.1.0-20 before 7.1.2-32 Invalid Memory Free in FX Operation2.0 Low
- freerdpFreeRDP from 3.9.0 before 3.32.0 RDPEAR NULL Pointer Dereference via KERB_RPC_INTERNAL_NAME6.0 Medium
- freerdpFreeRDP before 3.32.0 NULL Dereference in Video Redirection Channel2.3 Low
- zephyrproject zephyrNULL pointer dereference in the ESP32 I2S driver when triggering an unsupported direction5.5 Medium
- getkin kin-openapikin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with content8.2 High
- getkin kin-openapikin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS)5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: denial of service via null pointer dereference in xcf simulation parasite loading5.5 Medium
- illumos illumos-gate, omnios +1 moreNULL pointer dereference in illumos nwamd door handler allows local users to crash the daemon5.4 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibhangul: null pointer dereference in hanja_new() when looking up a malformed hanja dictionary entry5.5 Medium
- Show moreLoading…