CWE-476— NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.— MITRE CWE catalog

5,837 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-476page 95 of 117

CVE-2021-40762MEDIUMCVSS 5.5EG 5.5
2022-03-16
Adobe Character Animator version 4.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denia…
CVE-2021-40750MEDIUMCVSS 5.5EG 5.5
2022-03-16
Adobe Bridge version 11.1.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-serv…
CVE-2021-40742MEDIUMCVSS 5.5EG 5.5
2022-03-16
Adobe Audition version 14.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-serv…
CVE-2021-40737MEDIUMCVSS 5.5EG 5.5
2022-03-16
Adobe Audition version 14.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-serv…
CVE-2022-24574MEDIUMCVSS 5.5EG 5.5
2022-03-14
GPAC 1.0.1 is affected by a NULL pointer dereference in gf_dump_vrml_field.isra ().
CVE-2022-0907MEDIUMCVSS 5.5EG 5.5
2022-03-11
Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f2b656e2.
CVE-2022-25108MEDIUMCVSS 5.5EG 5.5
2022-03-10
Foxit PDF Reader and Editor before 11.2.1 and PhantomPDF before 10.1.7 allow a NULL pointer dereference during PDF parsing because the pointer is used without proper validation.
CVE-2022-0433MEDIUMCVSS 5.5EG 5.5
2022-03-10
A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the map_get_next_key function of the BPF bloom filter. This flaw allows a local user to crash the system. This flaw affects Linux kern…
CVE-2021-4095MEDIUMCVSS 5.5EG 5.5
2022-03-10
A NULL pointer dereference was found in the Linux kernel's KVM when dirty ring logging is enabled without an active vCPU context. An unprivileged local attacker on the host may use this flaw to cause a kernel oops condition and thus a deni…
CVE-2021-34122MEDIUMCVSS 5.5EG 5.5
2022-03-10
The function bitstr_tell at bitstr.c in ffjpeg commit 4ab404e has a NULL pointer dereference.
CVE-2022-0890MEDIUMCVSS 5.5EG 5.5
2022-03-10
NULL Pointer Dereference in GitHub repository mruby/mruby prior to 3.2.
CVE-2022-0712MEDIUMCVSS 5.5EG 5.5
2022-02-22
NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.4.
CVE-2022-0696MEDIUMCVSS 5.5EG 5.5
2022-02-21
NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4428.
CVE-2022-0632MEDIUMCVSS 5.5EG 5.5
2022-02-19
NULL Pointer Dereference in Homebrew mruby prior to 3.2.
CVE-2022-23199MEDIUMCVSS 5.5EG 5.5
2022-02-16
Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in…
CVE-2022-23198MEDIUMCVSS 5.5EG 5.5
2022-02-16
Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in…
CVE-2022-23189MEDIUMCVSS 5.5EG 5.5
2022-02-16
Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in…
CVE-2022-0617MEDIUMCVSS 5.5EG 5.5
2022-02-16
A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers udf_file_write_iter function for the malicious UDF image. A local user could use this flaw to crash the system. Actual fro…
CVE-2021-44879MEDIUMCVSS 5.5EG 5.5
2022-02-14
In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL pointer dereference.
CVE-2022-0562MEDIUMCVSS 5.5EG 5.5
2022-02-11
Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tif_dirread.c in libtiff versions from 4.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sou…
CVE-2022-0561MEDIUMCVSS 5.5EG 5.5
2022-02-11
Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from…
CVE-2022-21815MEDIUMCVSS 5.5EG 5.5
2022-02-07
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for private IOCTLs where a NULL pointer dereference in the kernel, created within user mode code, may lead to a denial of servic…
CVE-2021-4043MEDIUMCVSS 5.5EG 5.5
2022-02-04
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 1.1.0.
CVE-2022-24249MEDIUMCVSS 5.5EG 5.5
2022-02-04
A Null Pointer Dereference vulnerability exists in GPAC 1.1.0 via the xtra_box_write function in /box_code_base.c, which causes a Denial of Service. This vulnerability was fixed in commit 71f9871.
CVE-2022-0419MEDIUMCVSS 5.5EG 5.5
2022-02-01
NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.0.
CVE-2021-46664MEDIUMCVSS 5.5EG 5.5
2022-02-01
MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr.
CVE-2022-0286MEDIUMCVSS 5.5EG 5.5
2022-01-31
A flaw was found in the Linux kernel. A null pointer dereference in bond_ipsec_add_sa() may lead to local denial of service.
CVE-2021-45847MEDIUMCVSS 5.5EG 5.5
2022-01-25
Several missing input validations in the 3MF parser component of Slic3r libslic3r 1.3.0 can each allow an attacker to cause an application crash using a crafted 3MF input file.
CVE-2021-45846MEDIUMCVSS 5.5EG 5.5
2022-01-25
A flaw in the AMF parser of Slic3r libslic3r 1.3.0 allows an attacker to cause an application crash using a crafted AMF document, where a metadata tag lacks a "type" attribute.
CVE-2021-45343MEDIUMCVSS 5.5EG 5.5
2022-01-25
In LibreCAD 2.2.0, a NULL pointer dereference in the HATCH handling of libdxfrw allows an attacker to crash the application using a crafted DXF document.
CVE-2021-46311MEDIUMCVSS 5.5EG 5.5
2022-01-21
A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_sg_destroy_routes () at scenegraph/vrml_route.c. This vulnerability can lead to a Denial of Service (DoS).
CVE-2021-46240MEDIUMCVSS 5.5EG 5.5
2022-01-21
A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_dump_vrml_sffield () at scene_manager/scene_dump.c. This vulnerability can lead to a Denial of Service (DoS).
CVE-2021-46237MEDIUMCVSS 5.5EG 5.5
2022-01-21
An untrusted pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_node_unregister () at scenegraph/base_scenegraph.c. This vulnerability can lead to a Denial of Service (DoS).
CVE-2021-46236MEDIUMCVSS 5.5EG 5.5
2022-01-21
A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_sg_vrml_field_pointer_del () at scenegraph/vrml_tools.c. This vulnerability can lead to a Denial of Service (DoS).
CVE-2021-46234MEDIUMCVSS 5.5EG 5.5
2022-01-21
A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_node_unregister () at scenegraph/base_scenegraph.c. This vulnerability can lead to a Denial of Service (DoS).
CVE-2022-0326MEDIUMCVSS 5.5EG 5.5
2022-01-21
NULL Pointer Dereference in Homebrew mruby prior to 3.2.
CVE-2021-46335MEDIUMCVSS 5.5EG 5.5
2022-01-20
Moddable SDK v11.5.0 was discovered to contain a NULL pointer dereference in the component fx_Function_prototype_hasInstance.
CVE-2021-34405MEDIUMCVSS 5.5EG 5.5
2022-01-18
NVIDIA Linux distributions contain a vulnerability in TrustZone’s TEE_Malloc function, where an unchecked return value causing a null pointer dereference may lead to denial of service.
CVE-2021-46171MEDIUMCVSS 5.5EG 5.5
2022-01-14
Modex v2.11 was discovered to contain a NULL pointer dereference in set_create_id() at xtract.c.
CVE-2021-46019MEDIUMCVSS 5.5EG 5.5
2022-01-14
An untrusted pointer dereference in rec_db_destroy() at rec-db.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash.
CVE-2021-40576MEDIUMCVSS 5.5EG 5.5
2022-01-13
The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the gf_isom_get_payt_count function in hint_track.c, which allows attackers to cause a denial of service.
CVE-2021-40575MEDIUMCVSS 5.5EG 5.5
2022-01-13
The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the mpgviddmx_process function in reframe_mpgvid.c, which allows attackers to cause a denial of service. This vulnerability is possibly due to an incomplete fi…
CVE-2021-40565MEDIUMCVSS 5.5EG 5.5
2022-01-12
A Segmentation fault caused by a null pointer dereference vulnerability exists in Gpac through 1.0.1 via the gf_avc_parse_nalu function in av_parsers.c when using mp4box, which causes a denial of service.
CVE-2021-40564MEDIUMCVSS 5.5EG 5.5
2022-01-12
A Segmentation fault caused by null pointer dereference vulnerability eists in Gpac through 1.0.2 via the avc_parse_slice function in av_parsers.c when using mp4box, which causes a denial of service.
CVE-2021-40563MEDIUMCVSS 5.5EG 5.5
2022-01-12
A Segmentation fault exists casued by null pointer dereference exists in Gpac through 1.0.1 via the naludmx_create_avc_decoder_config function in reframe_nalu.c when using mp4box, which causes a denial of service.
CVE-2021-40559MEDIUMCVSS 5.5EG 5.5
2022-01-12
A null pointer deference vulnerability exists in gpac through 1.0.1 via the naludmx_parse_nal_avc function in reframe_nalu, which allows a denail of service.
CVE-2020-25427MEDIUMCVSS 5.5EG 5.5
2022-01-10
A Null pointer dereference vulnerability exits in MP4Box - GPAC version 0.8.0-rev177-g51a8ef874-master via the gf_isom_get_track_id function, which causes a denial of service.
CVE-2021-46051MEDIUMCVSS 5.5EG 5.5
2022-01-10
A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the Media_IsSelfContained function, which could cause a Denial of Service. .
CVE-2021-46049MEDIUMCVSS 5.5EG 5.5
2022-01-10
A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf_fileio_check function, which could cause a Denial of Service.
CVE-2021-46047MEDIUMCVSS 5.5EG 5.5
2022-01-10
A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf_hinter_finalize function.

Map vulnerabilities like CWE-476 to your infrastructure

EchelonGraph correlates every CVE — across CWE-476 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Book a Demo →