CWE-476— NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.— MITRE CWE catalog
5,765 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-476page 17 of 116
- CVE-2025-24177HIGHCVSS 7.5EG 7.52025-01-27
A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An attacker on the local network may be…
- CVE-2025-20165HIGHCVSS 7.5EG 7.52025-01-22
A vulnerability in the SIP processing subsystem of Cisco BroadWorks could allow an unauthenticated, remote attacker to halt the processing of incoming SIP requests, resulting in a denial of service (DoS) condition. This vulnerability is…
- CVE-2024-24442HIGHCVSS 7.5EG 7.52025-01-21
A NULL pointer dereference in the ngap_app::handle_receive routine of OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.0.0 allows attackers to cause a Denial of Service (DoS) via a crafted NGAP message.
- CVE-2025-0430HIGHCVSS 7.5EG 7.52025-01-17
Belledonne Communications Linphone-Desktop is vulnerable to a NULL Dereference vulnerability, which could allow a remote attacker to create a denial-of-service condition.
- CVE-2025-0492HIGHCVSS 7.5EG 7.52025-01-15
A vulnerability has been found in D-Link DIR-823X 240126/240802 and classified as critical. Affected by this vulnerability is the function FUN_00412244. The manipulation leads to null pointer dereference. The attack can be launched remotel…
- CVE-2024-48857HIGHCVSS 7.5EG 7.52025-01-14
NULL pointer dereference in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition in the context of the process using the image codec.
- CVE-2023-6603HIGHCVSS 7.5EG 7.52024-12-31
A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability allows a denial of service via a maliciously crafted HLS playlist that triggers a null pointer dereference during initialization.
- CVE-2024-56318HIGHCVSS 7.5EG 7.52024-12-18
In raw\TCP.cpp in Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0 before 27ca6ec, there is a NULL pointer dereference in TCPBase::ProcessSingleMessage via TCP packets with zero messageSize, leading to denial of service.
- CVE-2024-53580HIGHCVSS 7.5EG 7.52024-12-18
iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters() function.
- CVE-2024-53270HIGHCVSS 7.5EG 7.52024-12-18
Envoy is a cloud-native high-performance edge/middle/service proxy. In affected versions `sendOverloadError` is going to assume the active request exists when `envoy.load_shed_points.http1_server_abort_dispatch` is configured. If `active_r…
- CVE-2024-36832HIGHCVSS 7.5EG 7.52024-12-17
A NULL pointer dereference in D-Link DAP-1513 REVA_FIRMWARE_1.01 allows attackers to cause a Denial of Service (DoS) via a crafted web request without authentication. The vulnerability occurs in the /bin/webs binary of the firmware. When /…
- CVE-2024-49121HIGHCVSS 7.5EG 7.52024-12-12
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
- CVE-2024-47835HIGHCVSS 7.5EG 7.52024-12-12
GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been detected in the parse_lrc function within gstsubparse.c. The parse_lrc function calls strchr() to find the chara…
- CVE-2024-47603HIGHCVSS 7.5EG 7.52024-12-12
GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_matroska_demux_update_tracks function within matroska-demux.c. The vulnerability occurs wh…
- CVE-2024-47602HIGHCVSS 7.5EG 7.52024-12-12
GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_matroska_demux_add_wvpk_header function within matroska-demux.c. This function does not pr…
- CVE-2024-47601HIGHCVSS 7.5EG 7.52024-12-12
GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_matroska_demux_parse_blockgroup_or_simpleblock function within matroska-demux.c. This func…
- CVE-2024-47599HIGHCVSS 7.5EG 7.52024-12-12
GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_jpeg_dec_negotiate function in gstjpegdec.c. This function does not check for a NULL retur…
- CVE-2024-47544HIGHCVSS 7.5EG 7.52024-12-12
GStreamer is a library for constructing graphs of media-handling components. The function qtdemux_parse_sbgp in qtdemux.c is affected by a null dereference vulnerability. This vulnerability is fixed in 1.24.10.
- CVE-2024-47542HIGHCVSS 7.5EG 7.52024-12-12
GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference has been discovered in the id3v2_read_synch_uint function, located in id3v2.c. If id3v2_read_synch_uint is called with a null work->hdr…
- CVE-2024-44856HIGHCVSS 7.5EG 7.52024-12-06
Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component nav2_smac_planner().
- CVE-2024-44855HIGHCVSS 7.5EG 7.52024-12-06
Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component nav2_navfn_planner().
- CVE-2024-44854HIGHCVSS 7.5EG 7.52024-12-06
Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component smoothPlan().
- CVE-2024-44853HIGHCVSS 7.5EG 7.52024-12-06
Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component computeControl().
- CVE-2024-11148HIGHCVSS 7.5EG 7.52024-12-05
In OpenBSD 7.4 before errata 006 and OpenBSD 7.3 before errata 020, httpd(8) is vulnerable to a NULL dereference when handling a malformed fastcgi request.
- CVE-2024-45969HIGHCVSS 7.5EG 7.52024-11-15
NULL pointer dereference in the MMS Client in MZ Automation LibIEC1850 before commit 7afa40390b26ad1f4cf93deaa0052fe7e357ef33 allows a malicious server to Cause a Denial-of-Service via the MMS InitiationResponse message.
- CVE-2024-2551HIGHCVSS 7.5EG 7.52024-11-14
A null pointer dereference vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop a core system service on the firewall by sending a crafted packet through the data plane that causes a denial of ser…
- CVE-2024-2550HIGHCVSS 7.5EG 7.52024-11-14
A null pointer dereference vulnerability in the GlobalProtect gateway in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop the GlobalProtect service on the firewall by sending a specially crafted packet that ca…
- CVE-2024-8495HIGHCVSS 7.5EG 7.52024-11-12
A null pointer dereference in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a remote unauthenticated attacker to cause a denial of service.
- CVE-2024-50318HIGHCVSS 7.5EG 7.52024-11-12
A null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service.
- CVE-2024-50317HIGHCVSS 7.5EG 7.52024-11-12
A null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service.
- CVE-2024-27532HIGHCVSS 7.5EG 7.52024-11-08
wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) 06df58f is vulnerable to NULL Pointer Dereference in function `block_type_get_result_types.
- CVE-2024-22733HIGHCVSS 7.5EG 7.52024-11-01
TP Link MR200 V4 Firmware version 210201 was discovered to contain a null-pointer-dereference in the web administration panel on /cgi/login via the sign, Action or LoginStatus query parameters which could lead to a denial of service by a l…
- CVE-2024-44101HIGHCVSS 7.5EG 7.52024-10-25
there is a possible Null Pointer Dereference (modem crash) due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
- CVE-2024-47007HIGHCVSS 7.5EG 7.52024-10-08
A NULL pointer dereference in WLAvalancheService.exe of Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to cause a denial of service.
- CVE-2024-39589HIGHCVSS 7.5EG 7.52024-09-18
Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a36d95b73e7b8722d0edb8b9c5bb56a. A specially crafted EtherNet/IP request can lead to denial of servic…
- CVE-2024-38233HIGHCVSS 7.5EG 7.52024-09-10
Windows Networking Denial of Service Vulnerability
- CVE-2024-38232HIGHCVSS 7.5EG 7.52024-09-10
Windows Networking Denial of Service Vulnerability
- CVE-2024-7652HIGHCVSS 7.5EG 7.52024-09-06
An error in the ECMA-262 specification relating to Async Generators could have resulted in a type confusion, potentially leading to memory corruption and an exploitable crash. This vulnerability affects Firefox < 128, Firefox ESR < 115.13,…
- CVE-2024-42058HIGHCVSS 7.5EG 7.52024-09-03
A null pointer dereference vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series firmware versions from V5.20 through V5.38, and USG2…
- CVE-2024-45239HIGHCVSS 7.5EG 7.52024-08-24
An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor can serve (via rsync or RRDP) an ROA or a Manifest containing a null eContent field. Fort dereferences the pointer withou…
- CVE-2024-45238HIGHCVSS 7.5EG 7.52024-08-24
An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor can serve (via rsync or RRDP) a resource certificate containing a bit string that doesn't properly decode into a Subject …
- CVE-2024-45235HIGHCVSS 7.5EG 7.52024-08-24
An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor can serve (via rsync or RRDP) a resource certificate containing an Authority Key Identifier extension that lacks the keyI…
- CVE-2024-37399HIGHCVSS 7.5EG 7.52024-08-14
A NULL pointer dereference in WLAvalancheService in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to crash the service, resulting in a DoS.
- CVE-2024-38146HIGHCVSS 7.5EG 7.52024-08-13
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
- CVE-2024-38145HIGHCVSS 7.5EG 7.52024-08-13
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
- CVE-2024-38126HIGHCVSS 7.5EG 7.52024-08-13
Windows Network Address Translation (NAT) Denial of Service Vulnerability
- CVE-2024-7006HIGHCVSS 7.5EG 7.52024-08-12
A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a …
- CVE-2024-37826HIGHCVSS 7.5EG 7.52024-08-12
A NULL pointer dereference in vercot Serva v4.6.0 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
- CVE-2024-39948HIGHCVSS 7.5EG 7.52024-07-31
A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash.
- CVE-2024-38536HIGHCVSS 7.5EG 7.52024-07-11
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. A memory allocation failure due to `http.memcap` being reached leads to a NULL-ptr reference leading to a crash. Upgrade …
Map vulnerabilities like CWE-476 to your infrastructure
EchelonGraph correlates every CVE — across CWE-476 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →