CWE-476— NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.— MITRE CWE catalog
5,791 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-476page 32 of 116
- CVE-2026-20878HIGHCVSS 7.4EG 7.42026-08-11
Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enab…
- CVE-2026-20787HIGHCVSS 7.4EG 7.42026-08-11
Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enab…
- CVE-2026-40414HIGHCVSS 7.4EG 7.42026-05-12
Windows TCP/IP Denial of Service Vulnerability
- CVE-2026-40413HIGHCVSS 7.4EG 7.42026-05-12
Windows TCP/IP Denial of Service Vulnerability
- CVE-2026-42800HIGHCVSS 7.4EG 7.42026-04-30
NULL pointer dereference vulnerability in ASR1903 in ASR Lapwing_Linux on Linux (ims_client modules) allows Pointer Manipulation. This vulnerability is associated with program files sip/utils/src/sipuri.c.
- CVE-2025-68141HIGHCVSS 7.4EG 7.42026-01-21
EVerest is an EV charging software stack. Prior to version 2025.10.0, during the deserialization of a `DC_ChargeLoopRes` message that includes Receipt as well as TaxCosts, the vector `<DetailedTax>tax_costs` in the target `Receipt` structu…
- CVE-2025-29838HIGHCVSS 7.4EG 7.42025-05-13
Null pointer dereference in Windows Drivers allows an unauthorized attacker to elevate privileges locally.
- CVE-2024-39356HIGHCVSS 7.4EG 7.42025-02-12
NULL pointer dereference in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
- CVE-2021-47464HIGHCVSS 7.4EG 7.42024-05-22
In the Linux kernel, the following vulnerability has been resolved: audit: fix possible null-pointer dereference in audit_filter_rules Fix possible null-pointer dereference in audit_filter_rules. audit_filter_rules() error: we previous…
- CVE-2024-20312HIGHCVSS 7.4EG 7.42024-03-27
A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affecte…
- CVE-2020-3552HIGHCVSS 7.4EG 7.42020-09-24
A vulnerability in the Ethernet packet handling of Cisco Aironet Access Points (APs) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to…
- CVE-2025-57248HIGHCVSS 7.3EG 7.32025-09-15
A null pointer dereference vulnerability was discovered in SumatraPDF 3.5.2 during the processing of a crafted .djvu file. When the file is opened, the application crashes inside libmupdf.dll, specifically in the DataPool::has_data() funct…
- CVE-2021-30272HIGHCVSS 7.3EG 7.32022-01-03
Possible null pointer dereference in thread cache operation handler due to lack of validation of user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon …
- CVE-2021-30271HIGHCVSS 7.3EG 7.32022-01-03
Possible null pointer dereference in trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consume…
- CVE-2021-30270HIGHCVSS 7.3EG 7.32022-01-03
Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IO…
- CVE-2021-30269HIGHCVSS 7.3EG 7.32022-01-03
Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon In…
- CVE-2021-37659HIGHCVSS 7.3EG 7.32021-08-12
TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in all binary cwise operations that don't require broadcasting (e.…
- CVE-2021-1075HIGHCVSS 7.3EG 7.32021-04-21
NVIDIA Windows GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the program dereferences a pointer that contains a location for memory that is no…
- CVE-2026-24716HIGHCVSS 7.2EG 7.22026-06-10
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) a…
- CVE-2025-66281HIGHCVSS 7.2EG 7.22026-06-10
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vul…
- CVE-2025-62850HIGHCVSS 7.2EG 7.22026-06-10
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) a…
- CVE-2011-2184HIGHCVSS v2 7.2EG 7.22011-09-06
The key_replace_session_keyring function in security/keys/process_keys.c in the Linux kernel before 2.6.39.1 does not initialize a certain structure member, which allows local users to cause a denial of service (NULL pointer dereference an…
- CVE-2011-1229HIGHCVSS v2 7.2EG 7.22011-04-13
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges …
- CVE-2026-93316HIGHCVSS 7.1EG 7.12026-10-05
If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident.
- CVE-2026-9032HIGHCVSS 7.1EG 7.12026-10-01
Tapo C120 v1 and C200 v5 contain a NULL pointer dereference in the HTTPS onboarding connect request parser. The interface is reachable without authentication after initial setup and does not validate that a password field is present for …
- CVE-2026-69384HIGHCVSS 7.1EG 7.12026-09-08
Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized attacker to deny service locally.
- CVE-2026-80118HIGHCVSS 7.1EG 7.12026-09-04
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an unauthenticated physical memory disclosure in DirectIo64.sys, reachable by unprivileged local users throu…
- CVE-2026-17251HIGHCVSS 7.1EG 7.12026-08-21
A NULL pointer dereference vulnerability exists in the HTTP request parsing functionality of TL-MR6400 v7. An unauthenticated remote attacker can trigger the vulnerability by sending a specially crafted HTTP request containing a malforme…
- CVE-2026-64403HIGHCVSS 7.1EG 7.12026-07-25
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: validate option length before reading conf opt value l2cap_get_conf_opt() derives the option length from the attacker-controlled opt->len field and imm…
- CVE-2026-45958HIGHCVSS 7.1EG 7.12026-05-27
In the Linux kernel, the following vulnerability has been resolved: drm/exynos: vidi: fix to avoid directly dereferencing user pointer In vidi_connection_ioctl(), vidi->edid(user pointer) is directly dereferenced in the kernel. This all…
- CVE-2026-40401HIGHCVSS 7.1EG 7.12026-05-12
Windows TCP/IP Denial of Service Vulnerability
- CVE-2026-32894HIGHCVSS 7.1EG 7.12026-04-10
Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, an Insecure Direct Object Reference (IDOR) vulnerability in the gradebook result view page allows any authenticated teacher to delete any student's grade result …
- CVE-2024-57925HIGHCVSS 7.1EG 7.12025-01-19
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix a missing return value check bug In the smb2_send_interim_resp(), if ksmbd_alloc_work_struct() fails to allocate a node, it returns a NULL pointer to the in_w…
- CVE-2024-54106HIGHCVSS 7.1EG 7.12024-12-12
Null pointer dereference vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.
- CVE-2024-26672HIGHCVSS 7.1EG 7.12024-04-02
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix variable 'mca_funcs' dereferenced before NULL check in 'amdgpu_mca_smu_get_mca_entry()' Fixes the below: drivers/gpu/drm/amd/amdgpu/amdgpu_mca.c:377 amd…
- CVE-2023-33036HIGHCVSS 7.1EG 7.12024-01-02
Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call.
- CVE-2022-41858HIGHCVSS 7.1EG 7.12023-01-17
A flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is in progress to detach in sl_tx_timeout in drivers/net/slip/slip.c. This issue could allow an attacker to crash the system or leak internal ke…
- CVE-2022-31613HIGHCVSS 7.1EG 7.12022-11-19
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where any local user can cause a null-pointer dereference, which may lead to a kernel panic.
- CVE-2022-3202HIGHCVSS 7.1EG 7.12022-09-14
A NULL pointer dereference flaw in diFree in fs/jfs/inode.c in Journaled File System (JFS)in the Linux kernel. This could allow a local attacker to crash the system or leak kernel internal information.
- CVE-2022-1671HIGHCVSS 7.1EG 7.12022-07-26
A NULL pointer dereference flaw was found in rxrpc_preparse_s in net/rxrpc/server_key.c in the Linux kernel. This flaw allows a local attacker to crash the system or leak internal kernel information.
- CVE-2021-3739HIGHCVSS 7.1EG 7.12022-03-10
A NULL pointer dereference flaw was found in the btrfs_rm_device function in fs/btrfs/volumes.c in the Linux Kernel, where triggering the bug requires ‘CAP_SYS_ADMIN’. This flaw allows a local attacker to crash the system or leak kerne…
- CVE-2021-1935HIGHCVSS 7.1EG 7.12021-09-09
Possible null pointer dereference due to lack of validation check for passed pointer during key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Sna…
- CVE-2021-1064HIGHCVSS 7.1EG 7.12021-01-08
NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which it obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer, which may lead to information disclosure or de…
- CVE-2020-11668HIGHCVSS 7.1EG 7.12020-04-09
In the Linux kernel before 5.6.1, drivers/media/usb/gspca/xirlink_cit.c (aka the Xirlink camera USB driver) mishandles invalid descriptors, aka CID-a246b4d54770.
- CVE-2019-5007HIGHCVSS 7.1EG 7.12019-01-03
An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. It is an Out-of-Bounds Read Information Disclosure and crash due to a NULL pointer dereference when reading TIFF data during TIFF parsing.
- CVE-2011-1985HIGHCVSS 7.1EG 7.12011-10-12
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which al…
- CVE-2009-2516HIGHCVSS 7.1EG 7.12009-10-14
The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold and SP1, and Server 2008 Gold does not properly validate data sent from user mode, which allows local users to gain privileges via a crafted PE .exe file…
- CVE-2025-4478HIGHCVSS 6.5EG 7.12025-05-16
A flaw was found in the FreeRDP used by Anaconda's remote install feature, where a crafted RDP packet could trigger a segmentation fault. This issue causes the service to crash and remain defunct, resulting in a denial of service. It occur…
- CVE-2026-8035HIGHCVSS 5.5EG 7.12026-06-02
Improper input validation in the NI-PAL kernel driver may allow a local authenticated user to cause a denial of service by triggering a crash due to a NULL pointer dereference. This vulnerability affects NI-PAL 26.3.0 and prior versions on…
- CVE-2025-46400HIGHCVSS 5.5EG 7.12025-04-23
In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject function.
Map vulnerabilities like CWE-476 to your infrastructure
EchelonGraph correlates every CVE — across CWE-476 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →