CWE-476— NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.— MITRE CWE catalog

5,837 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-476page 93 of 117

CVE-2022-31615MEDIUMCVSS 5.5EG 5.5
2022-11-19
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a local user with basic capabilities can cause a null-pointer dereference, which may lead to denial of service.
CVE-2022-41889MEDIUMCVSS 5.5EG 5.5
2022-11-18
TensorFlow is an open source platform for machine learning. If a list of quantized tensors is assigned to an attribute, the pywrap code fails to parse the tensor and returns a `nullptr`, which is not caught. An example can be seen in `tf.c…
CVE-2022-37290MEDIUMCVSS 5.5EG 5.5
2022-11-14
GNOME Nautilus 42.2 allows a NULL pointer dereference and get_basename application crash via a pasted ZIP archive.
CVE-2022-39837MEDIUMCVSS 5.5EG 5.5
2022-10-25
An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted DLT file that crashes the process can be created. This is due to missing validation checks. There …
CVE-2022-3606MEDIUMCVSS 5.5EG 5.5
2022-10-19
A vulnerability was found in Linux Kernel. It has been classified as problematic. This affects the function find_prog_by_sec_insn of the file tools/lib/bpf/libbpf.c of the component BPF. The manipulation leads to null pointer dereference. …
CVE-2022-22233MEDIUMCVSS 5.5EG 5.5
2022-10-18
An Unchecked Return Value to NULL Pointer Dereference vulnerability in Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service…
CVE-2022-35691MEDIUMCVSS 5.5EG 5.5
2022-10-14
Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denia…
CVE-2022-42722MEDIUMCVSS 5.5EG 5.5
2022-10-14
In the Linux kernel 5.8 through 5.19.x before 5.19.16, local attackers able to inject WLAN frames into the mac80211 stack could cause a NULL pointer dereference denial-of-service attack against the beacon protection of P2P devices.
CVE-2022-41843MEDIUMCVSS 5.5EG 5.5
2022-09-30
An issue was discovered in Xpdf 4.04. There is a crash in convertToType0 in fofi/FoFiType1C.cc, a different vulnerability than CVE-2022-38928.
CVE-2022-41841MEDIUMCVSS 5.5EG 5.5
2022-09-30
An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in AP4_File::ParseStream in Core/Ap4File.cpp, which is called from AP4_File::AP4_File.
CVE-2022-1725MEDIUMCVSS 5.5EG 5.5
2022-09-29
NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959.
CVE-2022-3278MEDIUMCVSS 5.5EG 5.5
2022-09-23
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0552.
CVE-2022-32785MEDIUMCVSS 5.5EG 5.5
2022-09-23
A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing an image may lead to a denial-of-s…
CVE-2022-35087MEDIUMCVSS 5.5EG 5.5
2022-09-21
SWFTools commit 772e55a2 was discovered to contain a segmentation violation via MovieAddFrame at /src/gif2swf.c.
CVE-2022-40775MEDIUMCVSS 5.5EG 5.5
2022-09-18
An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in AP4_StszAtom::WriteFields.
CVE-2022-40774MEDIUMCVSS 5.5EG 5.5
2022-09-18
An issue was discovered in Bento4 through 1.6.0-639. There is a NULL pointer dereference in AP4_StszAtom::GetSampleSize.
CVE-2022-40476MEDIUMCVSS 5.5EG 5.5
2022-09-14
A null pointer dereference issue was discovered in fs/io_uring.c in the Linux kernel before 5.15.62. A local user could use this flaw to crash the system or potentially cause a denial of service.
CVE-2022-38497MEDIUMCVSS 5.5EG 5.5
2022-09-13
LIEF commit 365a16a was discovered to contain a segmentation violation via the component CoreFile.tcc:69.
CVE-2022-38307MEDIUMCVSS 5.5EG 5.5
2022-09-13
LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF::MachO::SegmentCommand::file_offset() at /MachO/SegmentCommand.cpp.
CVE-2022-38096MEDIUMCVSS 5.5EG 5.5
2022-09-09
A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user acc…
CVE-2022-3153MEDIUMCVSS 5.5EG 5.5
2022-09-08
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
CVE-2022-25310MEDIUMCVSS 5.5EG 5.5
2022-09-06
A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. This flaw allows an attacker to pass a specially crafted file to Fribidi, leading to a crash …
CVE-2022-3078MEDIUMCVSS 5.5EG 5.5
2022-09-01
An issue was discovered in the Linux kernel through 5.16-rc6. There is a lack of check after calling vzalloc() and lack of free after allocation in drivers/media/test-drivers/vidtv/vidtv_s302m.c.
CVE-2022-2153MEDIUMCVSS 5.5EG 5.5
2022-08-31
A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs, causing a NULL pointer dereference. This flaw allows an unprivileged local a…
CVE-2022-1263MEDIUMCVSS 5.5EG 5.5
2022-08-31
A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that result…
CVE-2020-35538MEDIUMCVSS 5.5EG 5.5
2022-08-31
A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo.
CVE-2022-2980MEDIUMCVSS 5.5EG 5.5
2022-08-25
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259.
CVE-2022-2923MEDIUMCVSS 5.5EG 5.5
2022-08-22
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240.
CVE-2021-3659MEDIUMCVSS 5.5EG 5.5
2022-08-22
A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection. This flaw allows a local user to crash the system. The highest threat from thi…
CVE-2022-2874MEDIUMCVSS 5.5EG 5.5
2022-08-18
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224.
CVE-2022-36153MEDIUMCVSS 5.5EG 5.5
2022-08-16
tifig v0.2.2 was discovered to contain a segmentation violation via std::vector<unsigned int, std::allocator<unsigned int> >::size() const at /bits/stl_vector.h.
CVE-2022-36151MEDIUMCVSS 5.5EG 5.5
2022-08-16
tifig v0.2.2 was discovered to contain a segmentation violation via getType() at /common/bbox.cpp.
CVE-2022-35108MEDIUMCVSS 5.5EG 5.5
2022-08-16
SWFTools commit 772e55a2 was discovered to contain a segmentation violation via DCTStream::getChar() at /xpdf/Stream.cc.
CVE-2022-31618MEDIUMCVSS 5.5EG 5.5
2022-08-05
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can dereference a null pointer, which may lead to denial of service.
CVE-2022-34556MEDIUMCVSS 5.5EG 5.5
2022-07-28
PicoC v3.2.2 was discovered to contain a NULL pointer dereference at variable.c.
CVE-2022-2549MEDIUMCVSS 5.5EG 5.5
2022-07-27
NULL Pointer Dereference in GitHub repository gpac/gpac prior to v2.1.0-DEV.
CVE-2021-33466MEDIUMCVSS 5.5EG 5.5
2022-07-26
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expand_smacro() in modules/preprocs/nasm/nasm-pp.c.
CVE-2021-33465MEDIUMCVSS 5.5EG 5.5
2022-07-26
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expand_mmacro() in modules/preprocs/nasm/nasm-pp.c.
CVE-2021-33463MEDIUMCVSS 5.5EG 5.5
2022-07-26
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in yasm_expr__copy_except() in libyasm/expr.c.
CVE-2021-33460MEDIUMCVSS 5.5EG 5.5
2022-07-26
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in if_condition() in modules/preprocs/nasm/nasm-pp.c.
CVE-2021-33459MEDIUMCVSS 5.5EG 5.5
2022-07-26
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in nasm_parser_directive() in modules/parsers/nasm/nasm-parse.c.
CVE-2021-33458MEDIUMCVSS 5.5EG 5.5
2022-07-26
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in find_cc() in modules/preprocs/nasm/nasm-pp.c.
CVE-2021-33457MEDIUMCVSS 5.5EG 5.5
2022-07-26
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expand_mmac_params() in modules/preprocs/nasm/nasm-pp.c.
CVE-2021-33456MEDIUMCVSS 5.5EG 5.5
2022-07-26
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in hash() in modules/preprocs/nasm/nasm-pp.c.
CVE-2021-33455MEDIUMCVSS 5.5EG 5.5
2022-07-26
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in do_directive() in modules/preprocs/nasm/nasm-pp.c.
CVE-2021-33454MEDIUMCVSS 5.5EG 5.5
2022-07-26
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in yasm_expr_get_intnum() in libyasm/expr.c.
CVE-2021-33449MEDIUMCVSS 5.5EG 5.5
2022-07-26
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_bcode_part_get_by_offset() in mjs.c.
CVE-2021-33447MEDIUMCVSS 5.5EG 5.5
2022-07-26
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_print() in mjs.c.
CVE-2021-33446MEDIUMCVSS 5.5EG 5.5
2022-07-26
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_next() in mjs.c.
CVE-2021-33445MEDIUMCVSS 5.5EG 5.5
2022-07-26
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_string_char_code_at() in mjs.c.

Map vulnerabilities like CWE-476 to your infrastructure

EchelonGraph correlates every CVE — across CWE-476 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Book a Demo →