CWE-476: NULL Pointer Dereference, page 73
Filter
The product dereferences a pointer that it expects to be valid but is NULL.
What the weakness is: CWE-476 at MITRE
Ask an AI about CWE-476
Show the prompt
Explain CWE-476: NULL Pointer Dereference and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/476.html and https://cve.bz/cve/cwe/476?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 7.5CVE-2023-38171EPSS 71%
Microsoft QUIC Denial of Service Vulnerability
- 7.5CVE-2023-36709EPSS 2.7%
Microsoft AllJoyn API Denial of Service Vulnerability
- 7.5CVE-2023-36603EPSS 2.5%
Windows TCP/IP Denial of Service Vulnerability
- 7.5CVE-2023-36602EPSS 2.5%
Windows TCP/IP Denial of Service Vulnerability
- 5.5CVE-2023-5441EPSS 0.4%
NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e28690229b68584f2d84556f8960.
- 5.5CVE-2023-42754EPSS 0.4%
A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was assumed to be associated with a device before calling __ip_options_compile, which is not always the case if the skb is re-routed by ipvs.…
- 5.5CVE-2023-43898EPSS 0.3%
Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function stbi__convert_format. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted pic file.
- 7.5CVE-2023-24847EPSS 0.4%
Transient DOS in Modem while allocating DSM items.
- 7.5CVE-2022-48606EPSS 0.5%
Stability-related vulnerability in the binder background management and control module. Successful exploitation of this vulnerability may affect availability.
- 6.5CVE-2023-20233EPSS 0.3%
A vulnerability in the Connectivity Fault Management (CFM) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to…
- 5.5CVE-2023-40032EPSS 0.3%
libvips is a demand-driven, horizontally threaded image processing library. A specially crafted SVG input can cause libvips versions 8.14.3 or earlier to segfault when attempting to parse a malformed UTF-8 character. Users should upgrade t…
- 5.7CVE-2023-4875EPSS 0.6%
Null pointer dereference when composing from a specially crafted draft message in Mutt >1.5.2 <2.2.12
- 6.5CVE-2023-4874EPSS 0.8%
Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2 <2.2.12
- 7.5CVE-2023-37368EPSS 0.6%
An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem (Exynos Mobile Processor, Automotive Processor, and Modem - Exynos 9810, Exynos 9610, Exynos 9820, Exynos 980, Exynos 850, Exynos 1080, Exynos 2100…
- 7.5CVE-2023-41909EPSS 1.1%
An issue was discovered in FRRouting FRR through 9.0. bgp_nlri_parse_flowspec in bgpd/bgp_flowspec.c processes malformed requests with no attributes, leading to a NULL pointer dereference.
- 5.5CVE-2023-41633EPSS 0.2%
Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/fileutil.c.
- 7.5CVE-2023-39351EPSS 1.6%
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions of FreeRDP are subject to a Null Pointer Dereference leading a crash in the RemoteFX (rfx) handling. Inside the `r…
- 5.5CVE-2023-4683EPSS 0.3%
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3-DEV.
- 5.5CVE-2023-4681EPSS 0.3%
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3-DEV.
- 7.5CVE-2023-41358EPSS 1.3%
An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c processes NLRIs if the attribute length is zero.
- 6.5CVE-2023-38712EPSS 0.8%
An issue was discovered in Libreswan 3.x and 4.x before 4.12. When an IKEv1 ISAKMP SA Informational Exchange packet contains a Delete/Notify payload followed by further Notifies that act on the ISAKMP SA, such as a duplicated Delete/Notify…
- 6.5CVE-2023-38711EPSS 0.8%
An issue was discovered in Libreswan before 4.12. When an IKEv1 Quick Mode connection configured with ID_IPV4_ADDR or ID_IPV6_ADDR receives an IDcr payload with ID_FQDN, a NULL pointer dereference causes a crash and restart of the pluto da…
- 7.5CVE-2023-36199EPSS 0.7%
An issue in skalenetwork sgxwallet v.1.9.0 and below allows an attacker to cause a denial of service via the trustedGenerateEcdsaKey component.
- 5.5CVE-2023-38665EPSS 0.3%
Null pointer dereference in ieee_write_file in nasm 2.16rc0 allows attackers to cause a denial of service (crash).
- 4.7CVE-2022-47022EPSS 0.3%
An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c.
- 10.0CVE-2022-36648EPSS 1.7%
The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers to crash the host qemu and potentially execute code on the host via execute a malformed program in …
- 5.5CVE-2022-35206EPSS 0.3%
Null pointer dereference vulnerability in Binutils readelf 2.38.50 via function read_and_display_attr_value in file dwarf.c.
- 7.5CVE-2022-28070EPSS 0.9%
A null pointer deference in __core_anal_fcn function in radare2 5.4.2 and 5.4.0.
- 6.5CVE-2021-40266EPSS 1.0%
FreeImage before 1.18.0, ReadPalette function in PluginTIFF.cpp is vulnerabile to null pointer dereference.
- 6.5CVE-2021-40264EPSS 0.7%
NULL pointer dereference vulnerability in FreeImage before 1.18.0 via the FreeImage_CloneTag function inFreeImageTag.cpp.
- 6.5CVE-2020-18378EPSS 0.6%
A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-as.
- 5.5CVE-2023-4459EPSS 0.2%
A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxnet3 in the Linux Kernel. This issue may allow a local attacker with normal user privilege to cause …
- 7.5CVE-2023-39669EPSS 1.3%
D-Link DIR-880 A1_FW107WWb08 was discovered to contain a NULL pointer dereference in the function FUN_00010824.
- 5.5CVE-2023-4385EPSS 0.2%
A NULL pointer dereference flaw was found in dbFree in fs/jfs/jfs_dmap.c in the journaling file system (JFS) in the Linux Kernel. This issue may allow a local attacker to crash the system due to a missing sanity check.
- 5.5CVE-2023-40360EPSS 0.4%
QEMU through 8.0.4 accesses a NULL pointer in nvme_directive_receive in hw/nvme/ctrl.c because there is no check for whether an endurance group is configured before checking whether Flexible Data Placement is enabled.
- 7.5CVE-2023-39397EPSS 0.4%
Input parameter verification vulnerability in the communication system. Successful exploitation of this vulnerability may affect availability.
- 5.5CVE-2021-3236EPSS 0.3%
vim 8.2.2348 is affected by null pointer dereference, allows local attackers to cause a denial of service (DoS) via the ex_buffer_all method.
- 7.5CVE-2020-36138EPSS 1.2%
An issue was discovered in decode_frame in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service (DoS).
- 5.5CVE-2020-36024EPSS 0.5%
An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::convertToType1 function.
- 5.5CVE-2020-24187EPSS 0.3%
An issue was discovered in ecma-helpers.c in jerryscript version 2.3.0, allows local attackers to cause a denial of service (DoS) (Null Pointer Dereference).
- 2.0CVE-2023-38524EPSS 0.2%
A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.171), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcent…
- 5.5CVE-2023-37732EPSS 0.4%
Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted file.
- 7.5CVE-2023-38670EPSS 0.7%
Null pointer dereference in paddle.flip in PaddlePaddle before 2.5.0. This resulted in a runtime crash and denial of service.
- 4.4CVE-2023-3772EPSS 0.5%
A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer in xfrm_update_ae_params(), leading t…
- 7.5CVE-2023-32252EPSS 4.1%
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_LOGOFF commands. The issue results from the lack of proper validation of a pointer prior to accessi…
- 7.5CVE-2023-32248EPSS 4.1%
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_TREE_CONNECT and SMB2_QUERY_INFO commands. The issue results from the lack of proper validation of …
- 6.5CVE-2023-3603EPSS 0.9%
A missing allocation check in sftp server processing read requests may cause a NULL dereference on low-memory conditions. The malicious client can request up to 4GB SFTP reads, causing allocation of up to 4GB buffers, which was not being c…
- 5.5CVE-2023-31441EPSS 0.3%
In NATO Communications and Information Agency anet (aka Advisor Network) through 3.3.0, an attacker can provide a crafted JSON file to sanitizeJson and cause an exception. This is related to the U+FFFD Unicode replacement character. A for …
- 5.5CVE-2020-23911EPSS 0.3%
An issue was discovered in asn1c through v0.9.28. A NULL pointer dereference exists in the function _default_error_logger() located in asn1fix.c. It allows an attacker to cause Denial of Service.
- 6.5CVE-2023-37456EPSS 0.5%
The session restore helper crashed whenever there was no parameter sent to the message handler. This vulnerability affects Firefox for iOS < 115.