CWE-476: NULL Pointer Dereference, page 76
Filter
The product dereferences a pointer that it expects to be valid but is NULL.
What the weakness is: CWE-476 at MITRE
Ask an AI about CWE-476
Show the prompt
Explain CWE-476: NULL Pointer Dereference and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/476.html and https://cve.bz/cve/cwe/476?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 6.5CVE-2023-1444EPSS 1.3%
A vulnerability was found in Filseclab Twister Antivirus 8. It has been rated as critical. This issue affects the function 0x8011206B in the library fildds.sys of the component IoControlCode Handler. The manipulation leads to denial of ser…
- 7.5CVE-2023-27787EPSS 1.5%
An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse_list function at the list.c:81 endpoint.
- 7.5CVE-2023-27786EPSS 1.5%
An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the macinstring function.
- 7.5CVE-2023-27785EPSS 1.5%
An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse endpoints function.
- 7.5CVE-2023-27784EPSS 1.5%
An issue found in TCPReplay v.4.4.3 allows a remote attacker to cause a denial of service via the read_hexstring function at the utils.c:309 endpoint.
- 7.0CVE-2023-28466EPSS 0.3%
do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference).
- 6.5CVE-2023-27102EPSS 0.7%
Libde265 v1.0.11 was discovered to contain a segmentation violation via the function decoder_context::process_slice_segment_header at decctx.cc.
- 7.8CVE-2023-24910EPSS 0.4%
Windows Graphics Component Elevation of Privilege Vulnerability
- 7.5CVE-2023-24859EPSS 1.7%
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
- 5.5CVE-2023-0973EPSS 0.2%
STEPTools v18SP1 ifcmesh library (v18.1) is affected due to a null pointer dereference, which could allow an attacker to deny application usage when reading a specially constructed file, resulting in an application crash.
- 5.5CVE-2023-1355EPSS 0.5%
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1402.
- 5.5CVE-2023-25947EPSS 0.2%
The bundle management subsystem within OpenHarmony-v3.1.4 and prior versions has a null pointer reference vulnerability which local attackers can exploit this vulnerability to cause a DoS attack to the system when installing a malicious HA…
- 5.5CVE-2023-24465EPSS 0.2%
Communication Wi-Fi subsystem within OpenHarmony-v3.1.4 and prior versions, OpenHarmony-v3.0.7 and prior versions has a null pointer reference vulnerability which local attackers can exploit this vulnerability to cause the current applica…
- 5.5CVE-2023-27114EPSS 0.3%
radare2 v5.8.3 was discovered to contain a segmentation fault via the component wasm_dis at p/wasm/wasm.c.
- 6.5CVE-2023-0845EPSS 1.0%
Consul and Consul Enterprise allowed an authenticated user with service:write permissions to trigger a workflow that causes Consul server and client agents to crash under certain circumstances. This vulnerability was fixed in Consul 1.14.5.
- 5.5CVE-2023-1264EPSS 0.4%
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392.
- 5.5CVE-2023-1186EPSS 0.4%
A vulnerability has been found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This vulnerability affects the function 0x222010/0x222018 in the library ftwebcam.sys of the component IOCTL Handler. The manipula…
- 3.3CVE-2023-0196EPSS 0.2%
NVIDIA CUDA Toolkit SDK contains a bug in cuobjdump, where a local user running the tool against an ill-formed binary may cause a null- pointer dereference, which may result in a limited denial of service.
- 5.5CVE-2023-23006EPSS 0.2%
In the Linux kernel before 5.15.13, drivers/net/ethernet/mellanox/mlx5/core/steering/dr_domain.c misinterprets the mlx5_get_uars_page return value (expects it to be NULL in the error case, whereas it is actually an error pointer).
- 5.5CVE-2023-23005EPSS 0.3%
In the Linux kernel before 6.2, mm/memory-tiers.c misinterprets the alloc_memory_type return value (expects it to be NULL in the error case, whereas it is actually an error pointer). NOTE: this is disputed by third parties because there ar…
- 5.5CVE-2023-23004EPSS 0.3%
In the Linux kernel before 5.19, drivers/gpu/drm/arm/malidp_planes.c misinterprets the get_sg_table return value (expects it to be NULL in the error case, whereas it is actually an error pointer).
- 5.5CVE-2023-23002EPSS 0.2%
In the Linux kernel before 5.16.3, drivers/bluetooth/hci_qca.c misinterprets the devm_gpiod_get_index_optional return value (expects it to be NULL in the error case, whereas it is actually an error pointer).
- 5.5CVE-2023-23001EPSS 0.2%
In the Linux kernel before 5.16.3, drivers/scsi/ufs/ufs-mediatek.c misinterprets the regulator_get return value (expects it to be NULL in the error case, whereas it is actually an error pointer).
- 5.5CVE-2023-23000EPSS 0.3%
In the Linux kernel before 5.17, drivers/phy/tegra/xusb.c mishandles the tegra_xusb_find_port_node return value. Callers expect NULL in the error case, but an error pointer is used.
- 5.5CVE-2023-24758EPSS 0.3%
libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_weighted_pred_avg_8_sse function at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.
- 5.5CVE-2023-24757EPSS 0.3%
libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the put_unweighted_pred_16_fallback function at fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.
- 5.5CVE-2023-24756EPSS 0.3%
libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_unweighted_pred_8_sse function at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.
- 5.5CVE-2023-24755EPSS 0.3%
libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the put_weighted_pred_8_fallback function at fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.
- 5.5CVE-2023-24754EPSS 0.3%
libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_weighted_pred_avg_8_sse function at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.
- 5.5CVE-2023-24752EPSS 0.3%
libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_hevc_epel_pixels_8_sse function at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.
- 6.5CVE-2023-24751EPSS 0.8%
libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the mc_chroma function at motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.
- 5.5CVE-2023-1095EPSS 0.2%
In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction object. nft_trans_destroy() calls list_del(), but the transaction was never placed on a list -- the list head is all zer…
- 5.5CVE-2023-22999EPSS 0.3%
In the Linux kernel before 5.16.3, drivers/usb/dwc3/dwc3-qcom.c misinterprets the dwc3_qcom_create_urs_usb_platdev return value (expects it to be NULL in the error case, whereas it is actually an error pointer).
- 5.5CVE-2023-22997EPSS 0.3%
In the Linux kernel before 6.1.2, kernel/module/decompress.c misinterprets the module_get_next_page return value (expects it to be NULL in the error case, whereas it is actually an error pointer).
- 7.5CVE-2023-23108EPSS 0.9%
In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a NULL pointer dereference in the function Xasc.
- 5.5CVE-2021-32844EPSS 0.2%
HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior of HyperKit, ` vi_pci_write` has is a call to `vc_cfgwrite` that does not check for null which when called makes the host crash…
- 5.5CVE-2021-32843EPSS 0.2%
HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior of HyperKit, `virtio.c` has is a call to `vc_cfgread` that does not check for null which when called makes the host crash. This…
- 5.5CVE-2023-21593EPSS 0.3%
Adobe InDesign versions ID18.1 (and earlier) and ID17.4 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in th…
- 5.5CVE-2022-35883EPSS 0.2%
NULL pointer dereference in the Intel(R) Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable denial of service via local access.
- 7.5CVE-2023-21700EPSS 1.7%
Windows iSCSI Discovery Service Denial of Service Vulnerability
- 5.5CVE-2022-47360EPSS 0.09%
In log service, there is a missing permission check. This could lead to local denial of service in log service.
- 5.5CVE-2022-47359EPSS 0.09%
In log service, there is a missing permission check. This could lead to local denial of service in log service.
- 5.5CVE-2022-44447EPSS 0.09%
In wlan driver, there is a possible null pointer dereference issue due to a missing bounds check. This could lead to local denial of service in wlan services.
- 7.5CVE-2022-25735EPSS 0.4%
Denial of service in modem due to missing null check while processing TCP or UDP packets from server
- 7.5CVE-2022-25733EPSS 0.4%
Denial of service in modem due to null pointer dereference while processing DNS packets
- 7.5CVE-2023-0401EPSS 1.8%
A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data. In case the hash algorithm used for the signature is known to the OpenSSL library but the implementation of the hash algorith…
- 7.5CVE-2023-0217EPSS 1.8%
An invalid pointer dereference on read can be triggered when an application tries to check a malformed DSA public key by the EVP_PKEY_public_check() function. This will most likely lead to an application crash. This function can be called …
- 7.5CVE-2023-0216EPSS 1.8%
An invalid pointer dereference on read can be triggered when an application tries to load malformed PKCS7 data with the d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions. The result of the dereference is an application crash which …
- 7.5CVE-2022-32663EPSS 1.6%
In Wi-Fi driver, there is a possible system crash due to null pointer dereference. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN202…
- 9.8CVE-2023-23087EPSS 0.9%
An issue was found in MojoJson v1.2.3 allows attackers to execute arbitary code via the destroy function.