CWE-476: NULL Pointer Dereference, page 75
Filter
The product dereferences a pointer that it expects to be valid but is NULL.
What the weakness is: CWE-476 at MITRE
Ask an AI about CWE-476
Show the prompt
Explain CWE-476: NULL Pointer Dereference and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/476.html and https://cve.bz/cve/cwe/476?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 9.8CVE-2023-31129EPSS 0.6%
The Contiki-NG operating system versions 4.8 and prior can be triggered to dereference a NULL pointer in the message handling code for IPv6 router solicitiations. Contiki-NG contains an implementation of IPv6 Neighbor Discovery (ND) in the…
- 7.5CVE-2023-29996EPSS 0.8%
In NanoMQ v0.15.0-0, segment fault with Null Pointer Dereference occurs in the process of decoding subinfo_decode and unsubinfo_decode.
- 7.5CVE-2022-33305EPSS 0.4%
Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH.
- 7.5CVE-2022-33304EPSS 0.4%
Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet.
- 4.7CVE-2023-0458EPSS 0.7%
A speculative pointer dereference problem exists in the Linux Kernel on the do_prlimit() function. The resource argument value is controlled and is used in pointer arithmetic for the 'rlim' variable and can be used to leak the contents. We…
- 7.8CVE-2022-42335EPSS 0.3%
x86 shadow paging arbitrary pointer dereference In environments where host assisted address translation is necessary but Hardware Assisted Paging (HAP) is unavailable, Xen will run guests in so called shadow mode. Due to too lax a check in…
- 6.5CVE-2023-28484EPSS 1.2%
In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occurs in xmlSchemaFixupComplexType in xmlschemas.c.
- 7.5CVE-2023-24822EPSS 0.9%
RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2022.10, an attacker can send a crafted frame to the device resulting in a NULL po…
- 7.5CVE-2023-24818EPSS 1.2%
RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2022.10, an attacker can send a crafted frame to the device resulting in a NULL po…
- 4.7CVE-2023-31083EPSS 0.3%
An issue was discovered in drivers/bluetooth/hci_ldisc.c in the Linux kernel 6.2. In hci_uart_tty_ioctl, there is a race condition between HCIUARTSETPROTO and HCIUARTGETPROTO. HCI_UART_PROTO_SET is set before hu->proto is set. A NULL point…
- 5.5CVE-2023-31081EPSS 0.4%
An issue was discovered in drivers/media/test-drivers/vidtv/vidtv_bridge.c in the Linux kernel 6.2. There is a NULL pointer dereference in vidtv_mux_stop_thread. In vidtv_stop_streaming, after dvb->mux=NULL occurs, it executes vidtv_mux_st…
- 3.3CVE-2023-25510EPSS 0.2%
NVIDIA CUDA Toolkit SDK for Linux and Windows contains a NULL pointer dereference in cuobjdump, where a local user running the tool against a malformed binary may cause a limited denial of service.
- 5.5CVE-2023-0190EPSS 0.2%
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a NULL pointer dereference may lead to denial of service.
- 5.5CVE-2023-2177EPSS 0.2%
A null pointer dereference issue was found in the sctp network protocol in net/sctp/stream_sched.c in Linux Kernel. If stream_in allocation is failed, stream_out is freed which would further be accessed. A local user could use this flaw to…
- 5.5CVE-2023-2166EPSS 0.2%
A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux. ml_priv may not be initialized in the receive path of CAN frames. A local user could use this flaw to crash the system or potentially…
- 5.5CVE-2023-28328EPSS 0.2%
A NULL pointer dereference flaw was found in the az6027 driver in drivers/media/usb/dev-usb/az6027.c in the Linux Kernel. The message from user space is not checked properly before transferring into the device. This flaw allows a local use…
- 5.5CVE-2023-28327EPSS 0.2%
A NULL pointer dereference flaw was found in the UNIX protocol in net/unix/diag.c In unix_diag_get_exact in the Linux Kernel. The newly allocated skb does not have sk, leading to a NULL pointer. This flaw allows a local user to crash or po…
- 4.7CVE-2023-1382EPSS 0.2%
A data race flaw was found in the Linux kernel, between where con is allocated and con->sock is set. This issue leads to a NULL pointer dereference when accessing con->sock->sk in net/tipc/topsrv.c in the tipc protocol in the Linux kernel.
- 5.5CVE-2023-1587EPSS 0.2%
Avast and AVG Antivirus for Windows were susceptible to a NULL pointer dereference issue via RPC-interface. The issue was fixed with Avast and AVG Antivirus version 22.11
- 6.5CVE-2020-28163EPSS 0.8%
libdwarf before 20201201 allows a dwarf_print_lines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname.
- 9.8CVE-2023-26463EPSS 2.3%
strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes within the same function. There is initially incorrect access control, later followed by an expired po…
- 5.5CVE-2023-29569EPSS 0.3%
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via ffi_cb_impl_wpwwwww at src/mjs_ffi.c. This vulnerability can lead to a Denial of Service (DoS).
- 7.5CVE-2022-33294EPSS 0.4%
Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request message.
- 7.5CVE-2022-33223EPSS 0.4%
Transient DOS in Modem due to null pointer dereference while processing the incoming packet with http chunked encoding.
- 7.5CVE-2022-25739EPSS 0.4%
Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call
- 6.5CVE-2023-1994EPSS 1.0%
GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file
- 7.5CVE-2023-26917EPSS 0.9%
libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lysp_stmt_validate_value at lys_parse_mem.c.
- 5.5CVE-2022-47468EPSS 0.08%
In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.
- 5.5CVE-2022-47467EPSS 0.08%
In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.
- 5.5CVE-2022-47466EPSS 0.08%
In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.
- 5.5CVE-2022-47465EPSS 0.08%
In vdsp service, there is a missing permission check. This could lead to local denial of service in vdsp service.
- 7.5CVE-2023-28766EPSS 0.9%
A vulnerability has been identified in SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 6MD86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 6MD89 (CP300) (All versions >= V7.80 < V9.64), SIPROTEC 5 6MU85 (CP300) (…
- 7.5CVE-2020-23259EPSS 0.8%
An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the Jsi_Strlen function in the src/jsiChar.c file.
- 5.3CVE-2023-26916EPSS 1.0%
libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lys_parse_mem at lys_parse_mem.c.
- 7.5CVE-2023-28625EPSS 1.3%
mod_auth_openidc is an authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. In versions 2.0.0 through 2.4.13.1, when `OIDCStripCookies` is set and a crafted …
- 6.5CVE-2023-0197EPSS 0.2%
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious user in a guest VM can cause a NULL-pointer dereference, which may lead to denial of service.
- 5.5CVE-2022-44369EPSS 0.3%
NASM 2.16 (development) is vulnerable to 476: Null Pointer Dereference via output/outaout.c.
- 5.5CVE-2022-44368EPSS 0.3%
NASM v2.16 was discovered to contain a null pointer deference in the NASM component
- 7.5CVE-2022-3116EPSS 0.9%
The Heimdal Software Kerberos 5 implementation is vulnerable to a null pointer dereferance. An attacker with network access to an application that depends on the vulnerable code path can cause the application to crash.
- 5.5CVE-2023-1631EPSS 0.3%
A vulnerability, which was classified as problematic, was found in JiangMin Antivirus 16.2.2022.418. This affects the function 0x222010 in the library kvcore.sys of the component IOCTL Handler. The manipulation leads to null pointer derefe…
- 5.5CVE-2023-1628EPSS 0.3%
A vulnerability classified as problematic has been found in Jianming Antivirus 16.2.2022.418. Affected is an unknown function in the library kvcore.sys of the component IoControlCode Handler. The manipulation leads to null pointer derefere…
- 7.5CVE-2023-25676EPSS 0.4%
TensorFlow is an open source machine learning platform. When running versions prior to 2.12.0 and 2.11.1 with XLA, `tf.raw_ops.ParallelConcat` segfaults with a nullptr dereference when given a parameter `shape` with rank that is not greate…
- 7.5CVE-2023-25674EPSS 0.4%
TensorFlow is an open source machine learning platform. Versions prior to 2.12.0 and 2.11.1 have a null pointer error in RandomShuffle with XLA enabled. A fix is included in TensorFlow 2.12.0 and 2.11.1.
- 7.5CVE-2023-25672EPSS 0.4%
TensorFlow is an open source platform for machine learning. The function `tf.raw_ops.LookupTableImportV2` cannot handle scalars in the `values` parameter and gives an NPE. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.
- 7.5CVE-2023-25670EPSS 0.4%
TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a null point error in QuantizedMatMulWithBiasAndDequantize with MKL enabled. A fix is included in TensorFlow version 2.12.0 and version 2.…
- 7.5CVE-2023-25665EPSS 0.4%
TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when `SparseSparseMaximum` is given invalid sparse tensors as inputs, it can give a null pointer error. A fix is included in TensorFlow versio…
- 7.5CVE-2023-25663EPSS 0.4%
TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when `ctx->step_containter()` is a null ptr, the Lookup function will be executed with a null pointer. A fix is included in TensorFlow 2.12.0 …
- 7.5CVE-2023-25660EPSS 0.4%
TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when the parameter `summarize` of `tf.raw_ops.Print` is zero, the new method `SummarizeArray<bool>` will reference to a nullptr, leading to a …
- 5.5CVE-2023-1583EPSS 0.2%
A NULL pointer dereference was found in io_file_bitmap_get in io_uring/filetable.c in the io_uring sub-component in the Linux Kernel. When fixed files are unregistered, some context information (file_alloc_{start,end} and alloc_hint) is no…
- 5.5CVE-2023-1446EPSS 0.3%
A vulnerability classified as problematic was found in Watchdog Anti-Virus 1.4.214.0. Affected by this vulnerability is the function 0x80002004/0x80002008 in the library wsdk-driver.sys of the component IoControlCode Handler. The manipulat…