cve.bz

CWE-476: NULL Pointer Dereference, page 74

Filter

The product dereferences a pointer that it expects to be valid but is NULL.

What the weakness is: CWE-476 at MITRE

Ask an AI about CWE-476

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-476: NULL Pointer Dereference and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/476.html and https://cve.bz/cve/cwe/476?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2023-3106EPSS 0.3%

    A NULL pointer dereference vulnerability was found in netlink_dump. This issue can occur when the Netlink socket receives the message(sendmsg) for the XFRM_MSG_GETSA, XFRM_MSG_GETPOLICY type message, and the DUMP flag is set and can cause …

  2. 7.5CVE-2023-29984EPSS 0.9%

    Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3. Processing a specially crafted request may lead an affected product to a denial-of-service (DoS) condition. As…

  3. 7.5CVE-2023-35338EPSS 2.0%

    Windows Peer Name Resolution Protocol Denial of Service Vulnerability

  4. 7.5CVE-2023-32084EPSS 1.8%

    HTTP.sys Denial of Service Vulnerability

  5. 7.5CVE-2023-3354EPSS 1.6%

    A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. If the previous con…

  6. 7.5CVE-2023-0359EPSS 0.9%

    A missing nullptr-check in handle_ra_input can cause a nullptr-deref.

  7. 6.5CVE-2021-33798EPSS 0.5%

    A null pointer dereference was found in libpano13, version libpano13-2.9.20. The flow allows attackers to cause a denial of service and potential code execute via a crafted file.

  8. 7.5CVE-2023-34164EPSS 0.4%

    Vulnerability of incomplete input parameter verification in the communication framework module. Successful exploitation of this vulnerability may affect availability.

  9. 5.9CVE-2022-48509EPSS 0.3%

    Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Share. Successful exploitation of this vulnerability may cause the program to exit abnormally.

  10. 3.3CVE-2023-25523EPSS 0.2%

    NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the nvdisasm binary file, where an attacker may cause a NULL pointer dereference by providing a user with a malformed ELF file. A successful exploit of this vulnerabilit…

  11. 6.5CVE-2023-3338EPSS 8.5%

    A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol. This issue could allow a remote user to crash the system.

  12. 5.5CVE-2023-2908EPSS 0.4%

    A null pointer dereference issue was found in Libtiff's tif_dir.c file. This issue may allow an attacker to pass a crafted TIFF image file to the tiffcp utility which triggers a runtime error that causes undefined behavior. This will resul…

  13. 5.5CVE-2023-3359EPSS 0.2%

    An issue was discovered in the Linux kernel brcm_nvram_parse in drivers/nvmem/brcm_nvram.c. Lacks for the check of the return value of kzalloc() can cause the NULL Pointer Dereference.

  14. 5.5CVE-2023-3358EPSS 0.2%

    A null pointer dereference was found in the Linux kernel's Integrated Sensor Hub (ISH) driver. This issue could allow a local user to crash the system.

  15. 5.5CVE-2023-3357EPSS 0.2%

    A NULL pointer dereference flaw was found in the Linux kernel AMD Sensor Fusion Hub driver. This flaw allows a local user to crash the system.

  16. 5.5CVE-2023-3355EPSS 0.3%

    A NULL pointer dereference flaw was found in the Linux kernel's drivers/gpu/drm/msm/msm_gem_submit.c code in the submit_lookup_cmds function, which fails because it lacks a check of the return value of kmalloc(). This issue allows a local …

  17. 4.4CVE-2023-3212EPSS 0.3%

    A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL.…

  18. 5.5CVE-2023-3220EPSS 0.2%

    An issue was discovered in the Linux kernel through 6.1-rc8. dpu_crtc_atomic_check in drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c lacks check of the return value of kzalloc() and will cause the NULL Pointer Dereference.

  19. 6.5CVE-2023-3316EPSS 1.1%

    A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.

  20. 6.5CVE-2023-33307EPSS 0.6%

    A null pointer dereference in Fortinet FortiOS before 7.2.5 and before 7.0.11, FortiProxy before 7.2.3 and before 7.0.9 allows attacker to denial of sslvpn service via specifically crafted request in network parameter.

  21. 6.5CVE-2023-33306EPSS 0.8%

    A null pointer dereference in Fortinet FortiOS before 7.2.5, before 7.0.11 and before 6.4.13, FortiProxy before 7.2.4 and before 7.0.10 allows attacker to denial of sslvpn service via specifically crafted request in bookmark parameter.

  22. 7.8CVE-2023-32008EPSS 0.7%

    Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

  23. 6.5CVE-2023-24938EPSS 2.0%

    Windows CryptoAPI Denial of Service Vulnerability

  24. 5.5CVE-2023-33121EPSS 0.2%

    A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V13.3 (All versions < V13.3.0.10), Teamcenter Visualization V14.0 (All versions <…

  25. 5.5CVE-2022-48445EPSS 0.08%

    In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.

  26. 5.5CVE-2022-48444EPSS 0.08%

    In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.

  27. 5.5CVE-2022-48443EPSS 0.08%

    In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.

  28. 5.5CVE-2022-48442EPSS 0.07%

    In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.

  29. 8.8CVE-2023-29539EPSS 0.7%

    When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character. This could have led to reflected file download attacks potentially tricking users to instal…

  30. 5.5CVE-2023-33461EPSS 0.4%

    iniparser v4.1 is vulnerable to NULL Pointer Dereference in function iniparser_getlongint which misses check NULL for function iniparser_getstring's return.

  31. 7.8CVE-2023-3012EPSS 0.4%

    NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.2.2.

  32. 7.5CVE-2023-2953EPSS 2.0%

    A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.

  33. 7.7CVE-2023-0779EPSS 0.5%

    At the most basic level, an invalid pointer can be input that crashes the device, but with more knowledge of the device’s memory layout, further exploitation is possible.

  34. 7.5CVE-2023-33973EPSS 1.0%

    RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames. In versions 2023.01 and prior, an attacker can send a crafted frame which is forwarded by the device. D…

  35. 7.5CVE-2023-24825EPSS 1.0%

    RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2023.04, an attacker can send a crafted frame to the device to trigger a NULL pointer …

  36. 4.7CVE-2023-2898EPSS 0.2%

    There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileged user to cause a denial of service problem.

  37. 6.5CVE-2023-1667EPSS 1.3%

    A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service.

  38. 5.5CVE-2023-2875EPSS 0.3%

    A vulnerability, which was classified as problematic, was found in eScan Antivirus 22.0.1400.2443. Affected is the function 0x22E008u in the library PROCOBSRVESX.SYS of the component IoControlCode Handler. The manipulation leads to null po…

  39. 5.5CVE-2023-2872EPSS 0.3%

    A vulnerability classified as problematic has been found in FlexiHub 5.5.14691.0. This affects the function 0x220088 in the library fusbhub.sys of the component IoControlCode Handler. The manipulation leads to null pointer dereference. An …

  40. 5.5CVE-2023-2871EPSS 0.4%

    A vulnerability was found in FabulaTech USB for Remote Desktop 6.1.0.0. It has been rated as problematic. Affected by this issue is the function 0x220448/0x220420/0x22040c/0x220408 of the component IoControlCode Handler. The manipulation l…

  41. 9.8CVE-2023-2840EPSS 0.7%

    NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.2.2.

  42. 7.5CVE-2023-24832EPSS 0.7%

    A null pointer dereference bug in Hermes prior to commit 5cae9f72975cf0e5a62b27fdd8b01f103e198708 could have been used by an attacker to crash an Hermes runtime where the EnableHermesInternal config option was set to true. Note that this i…

  43. 5.5CVE-2023-2731EPSS 0.4%

    A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file. This flaw allows a local attacker to craft specific input data that can cause the program to dereference a NULL pointer when decompr…

  44. 5.5CVE-2022-42878EPSS 0.2%

    Null pointer dereference for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potentially enable information disclosure via local access.

  45. 7.8CVE-2022-29508EPSS 0.2%

    Null pointer dereference in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalation of privilege via local access.

  46. 7.5CVE-2023-2617EPSS 1.4%

    A vulnerability classified as problematic was found in OpenCV wechat_qrcode Module up to 4.7.0. Affected by this vulnerability is the function DecodedBitStreamParser::decodeByteSegment of the file qrcode/decoder/decoded_bit_stream_parser.c…

  47. 5.5CVE-2023-2609EPSS 0.5%

    NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531.

  48. 7.5CVE-2023-24940EPSS 5.2%

    Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability

  49. 5.5CVE-2022-48241EPSS 0.09%

    In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.

  50. 5.5CVE-2022-48231EPSS 0.09%

    In soter service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.