CWE-476— NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.— MITRE CWE catalog
5,765 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-476page 20 of 116
- CVE-2022-33305HIGHCVSS 7.5EG 7.52023-05-02
Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH.
- CVE-2022-33304HIGHCVSS 7.5EG 7.52023-05-02
Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet.
- CVE-2023-24822HIGHCVSS 7.5EG 7.52023-04-24
RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2022.10, an attacker can send a crafted frame to the device resulting in a NULL po…
- CVE-2023-24818HIGHCVSS 7.5EG 7.52023-04-24
RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2022.10, an attacker can send a crafted frame to the device resulting in a NULL po…
- CVE-2022-33294HIGHCVSS 7.5EG 7.52023-04-13
Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request message.
- CVE-2022-33223HIGHCVSS 7.5EG 7.52023-04-13
Transient DOS in Modem due to null pointer dereference while processing the incoming packet with http chunked encoding.
- CVE-2022-25739HIGHCVSS 7.5EG 7.52023-04-13
Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call
- CVE-2023-26917HIGHCVSS 7.5EG 7.52023-04-11
libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lysp_stmt_validate_value at lys_parse_mem.c.
- CVE-2023-28766HIGHCVSS 7.5EG 7.52023-04-11
A vulnerability has been identified in SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 6MD86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 6MD89 (CP300) (All versions >= V7.80 < V9.64), SIPROTEC 5 6MU85 (CP300) (…
- CVE-2020-23259HIGHCVSS 7.5EG 7.52023-04-04
An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the Jsi_Strlen function in the src/jsiChar.c file.
- CVE-2023-28625HIGHCVSS 7.5EG 7.52023-04-03
mod_auth_openidc is an authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. In versions 2.0.0 through 2.4.13.1, when `OIDCStripCookies` is set and a crafted …
- CVE-2022-3116HIGHCVSS 7.5EG 7.52023-03-27
The Heimdal Software Kerberos 5 implementation is vulnerable to a null pointer dereferance. An attacker with network access to an application that depends on the vulnerable code path can cause the application to crash.
- CVE-2023-25676HIGHCVSS 7.5EG 7.52023-03-25
TensorFlow is an open source machine learning platform. When running versions prior to 2.12.0 and 2.11.1 with XLA, `tf.raw_ops.ParallelConcat` segfaults with a nullptr dereference when given a parameter `shape` with rank that is not greate…
- CVE-2023-25674HIGHCVSS 7.5EG 7.52023-03-25
TensorFlow is an open source machine learning platform. Versions prior to 2.12.0 and 2.11.1 have a null pointer error in RandomShuffle with XLA enabled. A fix is included in TensorFlow 2.12.0 and 2.11.1.
- CVE-2023-25672HIGHCVSS 7.5EG 7.52023-03-25
TensorFlow is an open source platform for machine learning. The function `tf.raw_ops.LookupTableImportV2` cannot handle scalars in the `values` parameter and gives an NPE. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.
- CVE-2023-25670HIGHCVSS 7.5EG 7.52023-03-25
TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a null point error in QuantizedMatMulWithBiasAndDequantize with MKL enabled. A fix is included in TensorFlow version 2.12.0 and version 2.…
- CVE-2023-25665HIGHCVSS 7.5EG 7.52023-03-25
TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when `SparseSparseMaximum` is given invalid sparse tensors as inputs, it can give a null pointer error. A fix is included in TensorFlow versio…
- CVE-2023-25663HIGHCVSS 7.5EG 7.52023-03-25
TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when `ctx->step_containter()` is a null ptr, the Lookup function will be executed with a null pointer. A fix is included in TensorFlow 2.12.0 …
- CVE-2023-25660HIGHCVSS 7.5EG 7.52023-03-25
TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when the parameter `summarize` of `tf.raw_ops.Print` is zero, the new method `SummarizeArray<bool>` will reference to a nullptr, leading to a …
- CVE-2023-1444HIGHCVSS 7.5EG 7.52023-03-17
A vulnerability was found in Filseclab Twister Antivirus 8. It has been rated as critical. This issue affects the function 0x8011206B in the library fildds.sys of the component IoControlCode Handler. The manipulation leads to denial of ser…
- CVE-2023-27787HIGHCVSS 7.5EG 7.52023-03-16
An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse_list function at the list.c:81 endpoint.
- CVE-2023-27786HIGHCVSS 7.5EG 7.52023-03-16
An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the macinstring function.
- CVE-2023-27785HIGHCVSS 7.5EG 7.52023-03-16
An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse endpoints function.
- CVE-2023-27784HIGHCVSS 7.5EG 7.52023-03-16
An issue found in TCPReplay v.4.4.3 allows a remote attacker to cause a denial of service via the read_hexstring function at the utils.c:309 endpoint.
- CVE-2023-24859HIGHCVSS 7.5EG 7.52023-03-14
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
- CVE-2023-23108HIGHCVSS 7.5EG 7.52023-02-27
In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a NULL pointer dereference in the function Xasc.
- CVE-2023-21700HIGHCVSS 7.5EG 7.52023-02-14
Windows iSCSI Discovery Service Denial of Service Vulnerability
- CVE-2022-25735HIGHCVSS 7.5EG 7.52023-02-12
Denial of service in modem due to missing null check while processing TCP or UDP packets from server
- CVE-2022-25733HIGHCVSS 7.5EG 7.52023-02-12
Denial of service in modem due to null pointer dereference while processing DNS packets
- CVE-2023-0401HIGHCVSS 7.5EG 7.52023-02-08
A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data. In case the hash algorithm used for the signature is known to the OpenSSL library but the implementation of the hash algorith…
- CVE-2023-0217HIGHCVSS 7.5EG 7.52023-02-08
An invalid pointer dereference on read can be triggered when an application tries to check a malformed DSA public key by the EVP_PKEY_public_check() function. This will most likely lead to an application crash. This function can be called …
- CVE-2023-0216HIGHCVSS 7.5EG 7.52023-02-08
An invalid pointer dereference on read can be triggered when an application tries to load malformed PKCS7 data with the d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions. The result of the dereference is an application crash which …
- CVE-2022-32663HIGHCVSS 7.5EG 7.52023-02-06
In Wi-Fi driver, there is a possible system crash due to null pointer dereference. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN202…
- CVE-2023-22839HIGHCVSS 7.5EG 7.52023-02-01
On BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all version of 13.1.x, when a DNS profile with the Rapid Response Mode setting enabled is configured on a virtual server…
- CVE-2023-22341HIGHCVSS 7.5EG 7.52023-02-01
On version 14.1.x before 14.1.5.3, and all versions of 13.1.x, when the BIG-IP APM system is configured with all the following elements, undisclosed requests may cause the Traffic Management Microkernel (TMM) to terminate: * An OAuth S…
- CVE-2023-22340HIGHCVSS 7.5EG 7.52023-02-01
On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a SIP profile is configured on a Message Routing type virtual server, undisclosed traffic can cause TMM to terminate.…
- CVE-2022-44018HIGHCVSS 7.5EG 7.52023-01-26
In Softing uaToolkit Embedded before 1.40.1, a malformed PubSub discovery announcement message can cause a NULL pointer dereference or out-of-bounds memory access in the subscriber application.
- CVE-2023-0122HIGHCVSS 7.5EG 7.52023-01-17
A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmet_setup_auth(), allows an attacker to perform a Pre-Auth Denial of Service (DoS) attack on a remote machine. Affected versions v6.0-rc1 to v6.0-rc3, fi…
- CVE-2022-41860HIGHCVSS 7.5EG 7.52023-01-17
In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will deref…
- CVE-2023-21757HIGHCVSS 7.5EG 7.52023-01-10
Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability
- CVE-2023-21683HIGHCVSS 7.5EG 7.52023-01-10
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
- CVE-2022-33299HIGHCVSS 7.5EG 7.52023-01-09
Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data.
- CVE-2022-33290HIGHCVSS 7.5EG 7.52023-01-09
Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed.
- CVE-2022-4843HIGHCVSS 7.5EG 7.52022-12-29
NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.8.2.
- CVE-2021-44758HIGHCVSS 7.5EG 7.52022-12-26
Heimdal before 7.7.1 allows attackers to cause a NULL pointer dereference in a SPNEGO acceptor via a preferred_mech_type of GSS_C_NO_OID and a nonzero initial_response value to send_accept.
- CVE-2022-41999HIGHCVSS 7.5EG 7.52022-12-22
A denial of service vulnerability exists in the DDS native tile reading functionality of OpenImageIO Project OpenImageIO v2.3.19.0 and v2.4.4.2. A specially-crafted .dds can lead to denial of service. An attacker can provide a malicious fi…
- CVE-2022-42527HIGHCVSS 7.5EG 7.52022-12-16
In cd_SsParseMsg of cd_SsCodec.c, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: A…
- CVE-2022-3109HIGHCVSS 7.5EG 7.52022-12-16
An issue was discovered in the FFmpeg package, where vp3_decode_frame in libavcodec/vp3.c lacks check of the return value of av_malloc() and will cause a null pointer dereference, impacting availability.
- CVE-2022-23476HIGHCVSS 7.5EG 7.52022-12-08
Nokogiri is an open source XML and HTML library for the Ruby programming language. Nokogiri `1.13.8` and `1.13.9` fail to check the return value from `xmlTextReaderExpand` in the method `Nokogiri::XML::Reader#attribute_hash`. This can lead…
- CVE-2022-25741HIGHCVSS 7.5EG 7.52022-11-15
Denial of service in WLAN due to potential null pointer dereference while accessing the memory location in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,…
Map vulnerabilities like CWE-476 to your infrastructure
EchelonGraph correlates every CVE — across CWE-476 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →