CWE-476— NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.— MITRE CWE catalog
5,837 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-476page 94 of 117
- CVE-2021-33444MEDIUMCVSS 5.5EG 5.52022-07-26
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in getprop_builtin_foreign() in mjs.c.
- CVE-2021-33442MEDIUMCVSS 5.5EG 5.52022-07-26
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in json_printf() in mjs.c.
- CVE-2021-33441MEDIUMCVSS 5.5EG 5.52022-07-26
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in exec_expr() in mjs.c.
- CVE-2021-33440MEDIUMCVSS 5.5EG 5.52022-07-26
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_bcode_commit() in mjs.c.
- CVE-2021-33439MEDIUMCVSS 5.5EG 5.52022-07-26
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is Integer overflow in gc_compact_strings() in mjs.c.
- CVE-2022-34520MEDIUMCVSS 5.5EG 5.52022-07-22
Radare2 v5.7.2 was discovered to contain a NULL pointer dereference via the function r_bin_file_xtr_load_buffer at bin/bfile.c. This vulnerability allows attackers to cause a Denial of Service (DOS) via a crafted binary file.
- CVE-2022-2476MEDIUMCVSS 5.5EG 5.52022-07-19
A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL ===================================================================84257==ERROR: AddressSanitizer: SEGV on unknown addre…
- CVE-2022-2279MEDIUMCVSS 5.5EG 5.52022-07-01
NULL Pointer Dereference in GitHub repository bfabiszewski/libmobi prior to 0.11.
- CVE-2022-1852MEDIUMCVSS 5.5EG 5.52022-06-30
A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in the x86_emulate_insn in arch/x86/kvm/emulate.c. This flaw occurs while executing an illegal instruction in guest in the …
- CVE-2022-2231MEDIUMCVSS 5.5EG 5.52022-06-28
NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.
- CVE-2021-40944MEDIUMCVSS 5.5EG 5.52022-06-28
In GPAC MP4Box 1.1.0, there is a Null pointer reference in the function gf_filter_pid_get_packet function in src/filter_core/filter_pid.c:5394, as demonstrated by GPAC. This can cause a denial of service (DOS).
- CVE-2021-40943MEDIUMCVSS 5.5EG 5.52022-06-28
In Bento4 1.6.0-638, there is a null pointer reference in the function AP4_DescriptorListInspector::Action function in Ap4Descriptor.h:124 , as demonstrated by GPAC. This can cause a denial of service (DOS).
- CVE-2022-2208MEDIUMCVSS 5.5EG 5.52022-06-27
NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163.
- CVE-2022-2085MEDIUMCVSS 5.5EG 5.52022-06-16
A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buffer device, it relies on an init_device_procs defined for the device that uses i…
- CVE-2022-31763MEDIUMCVSS 5.5EG 5.52022-06-13
The kernel module has the null pointer and out-of-bounds array vulnerabilities. Successful exploitation of this vulnerability may affect system availability.
- CVE-2022-32202MEDIUMCVSS 5.5EG 5.52022-06-02
In libjpeg 1.63, there is a NULL pointer dereference in LineBuffer::FetchRegion in linebuffer.cpp.
- CVE-2022-32201MEDIUMCVSS 5.5EG 5.52022-06-02
In libjpeg 1.63, there is a NULL pointer dereference in Component::SubXOf in component.hpp.
- CVE-2021-42202MEDIUMCVSS 5.5EG 5.52022-06-02
An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function swf_DeleteFilter() located in swffilter.c. It allows an attacker to cause Denial of Service.
- CVE-2021-42200MEDIUMCVSS 5.5EG 5.52022-06-02
An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function main() located in swfdump.c. It allows an attacker to cause Denial of Service.
- CVE-2021-42198MEDIUMCVSS 5.5EG 5.52022-06-02
An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function swf_GetBits() located in rfxswf.c. It allows an attacker to cause Denial of Service.
- CVE-2021-42196MEDIUMCVSS 5.5EG 5.52022-06-02
An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function traits_parse() located in abc.c. It allows an attacker to cause Denial of Service.
- CVE-2021-44974MEDIUMCVSS 5.5EG 5.52022-05-25
radareorg radare2 version 5.5.2 is vulnerable to NULL Pointer Dereference via libr/bin/p/bin_symbols.c binary symbol parser.
- CVE-2022-29206MEDIUMCVSS 5.5EG 5.52022-05-20
TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.SparseTensorDenseAdd` does not fully validate the input arguments. In this case, a reference ge…
- CVE-2022-29205MEDIUMCVSS 5.5EG 5.52022-05-20
TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, there is a potential for segfault / denial of service in TensorFlow by calling `tf.compat.v1.*` ops which don't yet have support …
- CVE-2022-29201MEDIUMCVSS 5.5EG 5.52022-05-20
TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.QuantizedConv2D` does not fully validate the input arguments. In this case, references get boun…
- CVE-2022-29031MEDIUMCVSS 5.5EG 5.52022-05-20
A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visualization V14.0 (All versions < V14.0.0.1). The CGM_NIST_Loader.dll contains a null pointer …
- CVE-2022-29029MEDIUMCVSS 5.5EG 5.52022-05-20
A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visualization V14.0 (All versions < V14.0.0.1). The CGM_NIST_Loader.dll contains a null pointer …
- CVE-2021-27548MEDIUMCVSS 5.5EG 5.52022-05-18
There is a Null Pointer Dereference vulnerability in the XFAScanner::scanNode() function in XFAScanner.cc in xpdf 4.03.
- CVE-2022-30975MEDIUMCVSS 5.5EG 5.52022-05-18
In Artifex MuJS through 1.2.0, jsP_dumpsyntax in jsdump.c has a NULL pointer dereference, as demonstrated by mujs-pp.
- CVE-2022-28189MEDIUMCVSS 5.5EG 5.52022-05-17
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a NULL pointer dereference may lead to a system crash.
- CVE-2022-1674MEDIUMCVSS 5.5EG 5.52022-05-12
NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 allows attackers to cause a denial of service…
- CVE-2022-1649MEDIUMCVSS 5.5EG 5.52022-05-10
Null pointer dereference in libr/bin/format/mach0/mach0.c in radareorg/radare2 in GitHub repository radareorg/radare2 prior to 5.7.0. It is likely to be exploitable. For more general description of heap buffer overflow, see [CWE](https://c…
- CVE-2022-27359MEDIUMCVSS 5.5EG 5.52022-05-05
Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow a this.maildoc NULL pointer dereference.
- CVE-2022-1516MEDIUMCVSS 5.5EG 5.52022-05-05
A NULL pointer dereference flaw was found in the Linux kernel’s X.25 set of standardized network protocols functionality in the way a user terminates their session using a simulated Ethernet card and continued usage of this connection. T…
- CVE-2021-42528MEDIUMCVSS 5.5EG 5.52022-05-02
XMP Toolkit 2021.07 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in t…
- CVE-2022-1507MEDIUMCVSS 5.5EG 5.52022-04-27
chafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a denial of service (crash) via a crafted input file. in GitHub repository hpjansson/chafa prior to 1.10.2. chafa: NULL Point…
- CVE-2022-1382MEDIUMCVSS 5.5EG 5.52022-04-18
NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of making the radare2 crash, thus affecting the availability of the system.
- CVE-2022-28049MEDIUMCVSS 5.5EG 5.52022-04-15
NGINX NJS 0.7.2 was discovered to contain a NULL pointer dereference via the component njs_vmcode_array at /src/njs_vmcode.c.
- CVE-2022-1283MEDIUMCVSS 5.5EG 5.52022-04-08
NULL Pointer Dereference in r_bin_ne_get_entrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability allows attackers to cause a denial of service (application crash).
- CVE-2022-1035MEDIUMCVSS 5.5EG 5.52022-03-21
Segmentation Fault caused by MP4Box -lsr in GitHub repository gpac/gpac prior to 2.1.0-DEV.
- CVE-2021-42264MEDIUMCVSS 5.5EG 5.52022-03-16
Adobe Premiere Pro 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-servic…
- CVE-2021-42263MEDIUMCVSS 5.5EG 5.52022-03-16
Adobe Premiere Pro 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-servic…
- CVE-2021-40796MEDIUMCVSS 5.5EG 5.52022-03-16
Adobe Premiere Pro 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-servic…
- CVE-2021-40789MEDIUMCVSS 5.5EG 5.52022-03-16
Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an applica…
- CVE-2021-40788MEDIUMCVSS 5.5EG 5.52022-03-16
Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an applica…
- CVE-2021-40785MEDIUMCVSS 5.5EG 5.52022-03-16
Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an applica…
- CVE-2021-40782MEDIUMCVSS 5.5EG 5.52022-03-16
Adobe Media Encoder 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-servi…
- CVE-2021-40781MEDIUMCVSS 5.5EG 5.52022-03-16
Adobe Media Encoder 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-servi…
- CVE-2021-40778MEDIUMCVSS 5.5EG 5.52022-03-16
Adobe Media Encoder 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-servi…
- CVE-2021-40768MEDIUMCVSS 5.5EG 5.52022-03-16
Adobe Character Animator version 4.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denia…
Map vulnerabilities like CWE-476 to your infrastructure
EchelonGraph correlates every CVE — across CWE-476 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →