cve.bz

CWE-476: NULL Pointer Dereference, page 5

Filter

The product dereferences a pointer that it expects to be valid but is NULL.

What the weakness is: CWE-476 at MITRE

Ask an AI about CWE-476

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-476: NULL Pointer Dereference and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/476.html and https://cve.bz/cve/cwe/476?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.5CVE-2026-76781EPSS 0.2%

    A flaw was found in libxml2. A local user or an attacker providing a specially crafted XML catalog can trigger a NULL pointer dereference during XML catalog parsing. This occurs when a `nextCatalog` element lacks its mandatory `catalog` at…

  2. 7.1CVE-2026-92417EPSS 0.7%

    A vulnerability was found in Open5GS up to 2.8.0. This affects the function ogs_pfcp_parse_volume_measurement in the library lib/pfcp/types.c of the component PFCP Handler. The manipulation results in null pointer dereference. The attack m…

  3. 7.5CVE-2026-38999EPSS 1.3%

    A Null Pointer Dereference in the mk_sched_event_close function (mk_server/mk_scheduler.c) of Monkey through commit 4fb0c16 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.

  4. 2.1CVE-2026-92413EPSS 0.6%

    A flaw has been found in Artifex MuPDF up to b6d17493700c621c0e70036980a6ebd06d2202c9. Affected by this vulnerability is the function pdf_open_filter of the file pdf-stream.c of the component PDF Xref Loading. Executing a manipulation can …

  5. 7.5CVE-2026-92626EPSS 0.5%

    Control iD iDSecure versions prior to 4.8.3.0 are affected by an unauthenticated Denial of Service. The /api/dguardintegration/dguardVersion endpoint dereferences DGuard integration login state that may be unset, raising an unhandled nul…

  6. 7.5CVE-2026-77692EPSS 6.6%

    An attacker can cause `named` to abort by sending a crafted DNS-over-HTTPS request with a cryptographically invalid SIG(0) record, and then closing the transport connection prematurely. This issue affects BIND 9 versions 9.20.0 through 9.2…

  7. 6.9CVE-2026-76868EPSS 0.5%

    Netcore NR255-V version 1.5.130703 contains a null pointer dereference vulnerability in route_policy_add.cgi caused by a missing exit_port parameter. Attackers can send requests lacking the exit_port field to trigger the null pointer deref…

  8. 6.9CVE-2026-76865EPSS 0.5%

    Netcore NR255-V version 1.5.130703 contains a null pointer dereference vulnerability in the QoS setter CGI handlers filter_conn_del_cgi.c and gre_prio_set_cgi.c due to unchecked atoi() results. An attacker can trigger the flaw by supplying…

  9. 7.1CVE-2026-91954EPSS 0.4%

    FreeRDP before 3.31.0 contains a null pointer dereference vulnerability in gdi_surface_bits when processing Surface Bits commands with NSCodec codec ID. A malicious RDP server can crash a FreeRDP client by sending a crafted Surface Bits co…

  10. 9.1CVE-2026-92051EPSS 0.5%

    Spoofing issue due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.

  11. 1.9CVE-2026-91782EPSS 0.2%

    A vulnerability was detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_allocate_dynrelocs of the file bfd/elfxx-x86.c of the component Dynamic Relocation Allocation. The manipulation results in null point…

  12. 1.9CVE-2026-91781EPSS 0.2%

    A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elf_x86_64_common_section_index of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereferen…

  13. 1.9CVE-2026-91780EPSS 0.2%

    A weakness has been identified in GNU Binutils 2.47. This impacts the function elf_link_add_object_symbols of the file bfd/elflink.c. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. T…

  14. 1.9CVE-2026-91779EPSS 0.2%

    A security flaw has been discovered in GNU Binutils 2.47. This affects the function _bfd_elf_eh_frame_section_offset of the file bfd/elf-eh-frame.c of the component Eh Frame Handler. Performing a manipulation results in null pointer derefe…

  15. 1.9CVE-2026-90830EPSS 0.2%

    A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function _bfd_write_merged_section of the file bfd/merge.c of the component Section Merge. The manipulation leads to null pointer dereference. The attack need…

  16. 1.9CVE-2026-90829EPSS 0.2%

    A weakness has been identified in GNU Binutils 2.47. This issue affects the function bfd_elf_set_group_contents of the file bfd/elf.c of the component SHT_GROUP Section Handler. Executing a manipulation can lead to null pointer dereference…

  17. 1.9CVE-2026-90828EPSS 0.2%

    A security flaw has been discovered in GNU Binutils 2.47. This vulnerability affects the function elf_orphan_compatible of the file ld/ldelf.c of the component ELF Orphan Section Handler. Performing a manipulation results in null pointer d…

  18. 6.5CVE-2026-65412EPSS 0.5%

    A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. Processing…

  19. 6.5CVE-2026-53719EPSS 0.7%

    Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, translateSecurityPolicyForRoute in internal/gatewayapi/securitypolicy.go dereferences a nil…

  20. 9.8CVE-2026-55209EPSS 0.8%

    resdata is software for reading and writing result files from the Eclipse reservoir simulator. Prior to 6.2.9, resdata insufficiently validates numeric fields, grid dimensions, keyword sizes, and array indexes while parsing untrusted GRDEC…

  21. 6.5CVE-2026-16702EPSS 0.5%

    IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a remote authenticated attacker to cause a denial of service due to a null pointer dereference.

  22. 1.9CVE-2026-90802EPSS 0.2%

    A weakness has been identified in GNU Binutils 2.47. Affected is the function bfd_putl64 of the file bfd/libbfd.c of the component ld. This manipulation causes null pointer dereference. The attack requires local access. The exploit has bee…

  23. 5.5CVE-2026-90995EPSS 0.1%

    A flaw was found in SSSD (System Security Services Daemon). A local attacker with privileges to connect to the PAM (Pluggable Authentication Modules) responder socket can send a specially crafted protocol request. If the `pam_app_services`…

  24. 2.1CVE-2026-90792EPSS 0.7%

    A flaw has been found in GPAC up to f1219cde. This issue affects the function gf_node_list_get_child of the file scenegraph/base_scenegraph.c of the component MP4Box. This manipulation of the argument Target causes null pointer dereference…

  25. 5.3CVE-2026-10556EPSS 0.4%

    Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to validate null entries in Microsoft Graph webhook notification payloads, which allows an unauthenticated attacker to crash the Microsoft C…

  26. 1.9CVE-2026-90622EPSS 0.2%

    A security flaw has been discovered in GNU libredwg 0.13.4. This impacts the function DWG_TABLE of the file src/dwg.spec of the component Layer Encoding. Performing a manipulation results in null pointer dereference. The attack needs to be…

  27. 3.5CVE-2026-33970EPSS 0.3%

    An issue was discovered in NR RRC and L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 1680, W920, W930, W1000, and Modem 5410. In the 5G baseband, a NULL…

  28. 1.9CVE-2026-90609EPSS 0.2%

    A vulnerability has been found in GPAC up to f1219cde. The impacted element is an unknown function of the file scenegraph/vrml_tools.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be per…

  29. 7.5CVE-2026-15891EPSS 0.6%

    The MQTT-SN client keepalive handler process_ping() in subsys/net/lib/mqtt_sn/mqtt_sn.c removes the gateway record after PINGREQ retries are exhausted. It invoked SYS_SLIST_PEEK_HEAD_CONTAINER(&client->gateways, gw, next) but discarded the…

  30. 1.9CVE-2026-90576EPSS 0.2%

    A security vulnerability has been detected in GPAC up to f1219cde. Affected is the function gf_node_list_add_child of the file scenegraph/base_scenegraph.c of the component MP4Box. Such manipulation leads to null pointer dereference. The a…

  31. 1.9CVE-2026-90573EPSS 0.2%

    A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gf_sg_mfurl_del of the file scenegraph/vrml_tools.c of the component MP4Box. The manipulation leads to null pointer dereference. Local access is re…

  32. 6.0CVE-2026-90782EPSS 0.6%

    S2OPC through 1.7.3 contains a null pointer dereference in msg_subscription_publish_bs__alloc_notification_message_items() where a failed allocation for DataChangeNotification is overwritten by a successful allocation for EventNotification…

  33. 5.4CVE-2026-90485EPSS 0.2%

    A flaw has been found in IOBit Uninstaller 15.5.0.11. Affected by this issue is the function sub_11838 of the file IURegistryFilter.sys of the component IOCTL Dispatch Handler. This manipulation causes null pointer dereference. The attack …

  34. 7.5CVE-2026-78130EPSS 0.3%

    strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser.

  35. 5.9CVE-2026-78126EPSS 0.5%

    strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin.

  36. 6.5CVE-2026-79590EPSS 0.4%

    A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions…

  37. 7.5CVE-2026-45747EPSS 0.4%

    Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.16, the Lua TLS certificate information helper could dereference NULL certificate fields when a Lua …

  38. 6.9CVE-2026-86547EPSS 0.2%

    mrubyc through 4.0.0 contains a null pointer dereference vulnerability in the op_enter() handler in src/vm.c when processing untrusted bytecode. Attackers can craft malicious .mrb bytecode files with OP_ENTER instructions at the top level …

  39. 6.5CVE-2026-66303EPSS 1.1%

    Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network.

  40. 8.8CVE-2026-77901EPSS 0.8%

    Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  41. 7.8CVE-2026-77489EPSS 0.3%

    Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  42. 7.5CVE-2026-72949EPSS 1.2%

    Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to deny service over a network.

  43. 6.5CVE-2026-72939EPSS 1.1%

    Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service over a network.

  44. 6.5CVE-2026-70575EPSS 1.0%

    Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network.

  45. 7.5CVE-2026-69881EPSS 1.2%

    Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.

  46. 7.5CVE-2026-69744EPSS 1.2%

    Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network.

  47. 7.5CVE-2026-69587EPSS 1.2%

    Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.

  48. 7.1CVE-2026-69384EPSS 0.4%

    Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized attacker to deny service locally.

  49. 6.5CVE-2026-62762EPSS 1.1%

    Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.

  50. 2.7CVE-2026-84392EPSS 1.1%

    A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.9.0, FortiPAM 1.8 all versions, FortiPAM 1.7 al…