cve.bz

CWE-476: NULL Pointer Dereference, page 79

Filter

The product dereferences a pointer that it expects to be valid but is NULL.

What the weakness is: CWE-476 at MITRE. OWASP Top 10: A10:2025 Mishandling of Exceptional Conditions

Ask an AI about CWE-476

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-476: NULL Pointer Dereference and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/476.html and https://cve.bz/cve/cwe/476?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.5CVE-2022-42306EPSS 0.2%

    An issue was discovered in Veritas NetBackup through 8.2 and related Veritas products. An attacker with local access can send a crafted packet to pbx_exchange during registration and cause a NULL pointer exception, effectively crashing the…

  2. 5.5CVE-2022-41843EPSS 0.4%

    An issue was discovered in Xpdf 4.04. There is a crash in convertToType0 in fofi/FoFiType1C.cc, a different vulnerability than CVE-2022-38928.

  3. 5.5CVE-2022-41841EPSS 0.3%

    An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in AP4_File::ParseStream in Core/Ap4File.cpp, which is called from AP4_File::AP4_File.

  4. 5.5CVE-2022-1725EPSS 0.5%

    NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959.

  5. 5.5CVE-2022-3278EPSS 1.1%

    NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0552.

  6. 5.5CVE-2022-32785EPSS 0.7%

    A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing an image may lead to a denial-of-s…

  7. 7.5CVE-2022-2973EPSS 1.1%

    MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) uses a NULL pointer in certain situations. which could allow an attacker to crash the server.

  8. 7.8CVE-2022-38928EPSS 0.4%

    XPDF 4.04 is vulnerable to Null Pointer Dereference in FoFiType1C.cc:2393.

  9. 5.5CVE-2022-35087EPSS 0.3%

    SWFTools commit 772e55a2 was discovered to contain a segmentation violation via MovieAddFrame at /src/gif2swf.c.

  10. 5.5CVE-2022-40775EPSS 0.3%

    An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in AP4_StszAtom::WriteFields.

  11. 5.5CVE-2022-40774EPSS 0.3%

    An issue was discovered in Bento4 through 1.6.0-639. There is a NULL pointer dereference in AP4_StszAtom::GetSampleSize.

  12. 7.5CVE-2022-36014EPSS 0.7%

    TensorFlow is an open source platform for machine learning. When `mlir::tfg::TFOp::nameAttr` receives null type list attributes, it crashes. We have patched the issue in GitHub commits 3a754740d5414e362512ee981eefba41561a63a6 and a0f0b9a21…

  13. 7.5CVE-2022-36013EPSS 0.7%

    TensorFlow is an open source platform for machine learning. When `mlir::tfg::GraphDefImporter::ConvertNodeDef` tries to convert NodeDefs without an op name, it crashes. We have patched the issue in GitHub commit a0f0b9a21c9270930457095092f…

  14. 7.5CVE-2022-36011EPSS 0.5%

    TensorFlow is an open source platform for machine learning. When `mlir::tfg::ConvertGenericFunctionToFunctionDef` is given empty function attributes, it gives a null dereference. We have patched the issue in GitHub commit 1cf45b831eeb0cab8…

  15. 7.5CVE-2022-36000EPSS 0.5%

    TensorFlow is an open source platform for machine learning. When `mlir::tfg::ConvertGenericFunctionToFunctionDef` is given empty function attributes, it gives a null dereference. We have patched the issue in GitHub commit aed36912609fc0722…

  16. 7.5CVE-2022-40759EPSS 1.0%

    A NULL pointer dereference issue in the TEE_MACCompareFinal function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_MACCompareFinal with a NULL pointer for the…

  17. 7.5CVE-2022-35965EPSS 0.5%

    TensorFlow is an open source platform for machine learning. If `LowerBound` or `UpperBound` is given an empty`sorted_inputs` input, it results in a `nullptr` dereference, leading to a segfault that can be used to trigger a denial of servic…

  18. 6.5CVE-2022-40738EPSS 0.8%

    An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in AP4_DescriptorListWriter::Action in Core/Ap4Descriptor.h, called from AP4_EsDescriptor::WriteFields and AP4_Expandable::Write.

  19. 5.5CVE-2022-40476EPSS 0.3%

    A null pointer dereference issue was discovered in fs/io_uring.c in the Linux kernel before 5.15.62. A local user could use this flaw to crash the system or potentially cause a denial of service.

  20. 7.1CVE-2022-3202EPSS 0.3%

    A NULL pointer dereference flaw in diFree in fs/jfs/inode.c in Journaled File System (JFS)in the Linux kernel. This could allow a local attacker to crash the system or leak kernel internal information.

  21. 5.5CVE-2022-38497EPSS 0.3%

    LIEF commit 365a16a was discovered to contain a segmentation violation via the component CoreFile.tcc:69.

  22. 5.5CVE-2022-38307EPSS 0.3%

    LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF::MachO::SegmentCommand::file_offset() at /MachO/SegmentCommand.cpp.

  23. 7.5CVE-2022-37797EPSS 2.5%

    In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It leads to null pointer dereference which crashes the server. It could be used by an external at…

  24. 5.5CVE-2022-38096EPSS 0.8%

    A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user acc…

  25. 5.5CVE-2022-3153EPSS 0.5%

    NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.

  26. 6.5CVE-2022-36661EPSS 0.9%

    xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vi_pci_read(). This vulnerability allows attackers to cause a Denial of Service via unspecified vectors.

  27. 6.5CVE-2022-36659EPSS 0.9%

    xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vi_pci_write(). This vulnerability allows attackers to cause a Denial of Service via unspecified vectors.

  28. 5.5CVE-2022-25310EPSS 0.5%

    A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. This flaw allows an attacker to pass a specially crafted file to Fribidi, leading to a crash …

  29. 7.5CVE-2022-39829EPSS 1.4%

    There is a NULL pointer dereference in aes256_encrypt in Samsung mTower through 0.3.0 due to a missing check on the return value of EVP_CIPHER_CTX_new.

  30. 5.5CVE-2021-35135EPSS 0.1%

    A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdr…

  31. 5.5CVE-2022-3078EPSS 0.2%

    An issue was discovered in the Linux kernel through 5.16-rc6. There is a lack of check after calling vzalloc() and lack of free after allocation in drivers/media/test-drivers/vidtv/vidtv_s302m.c.

  32. 7.5CVE-2022-36622EPSS 1.4%

    Samsung Electronics mTower v0.3.0 and earlier was discovered to contain a NULL pointer dereference via the function TEE_GetObjectInfo1.

  33. 7.5CVE-2022-36621EPSS 1.4%

    Samsung Electronics mTower v0.3.0 and earlier was discovered to contain a NULL pointer dereference via the function TEE_AllocateTransientObject.

  34. 7.5CVE-2020-35525EPSS 1.6%

    In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing.

  35. 5.5CVE-2022-2153EPSS 0.5%

    A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs, causing a NULL pointer dereference. This flaw allows an unprivileged local att…

  36. 5.5CVE-2022-1263EPSS 0.4%

    A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that result…

  37. 4.7CVE-2022-1205EPSS 0.4%

    A NULL pointer dereference flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This flaw allows a local user to crash the system.

  38. 5.5CVE-2020-35538EPSS 0.3%

    A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo.

  39. 6.5CVE-2021-46837EPSS 4.7%

    res_pjsip_t38 in Sangoma Asterisk 16.x before 16.16.2, 17.x before 17.9.3, and 18.x before 18.2.2, and Certified Asterisk before 16.8-cert7, allows an attacker to trigger a crash by sending an m=image line and zero port in a response to a …

  40. 7.5CVE-2022-39028EPSS 2.3%

    telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer dereference via 0xff 0xf7 or 0xff 0xf8. In a typical installation, the telnetd application would crash but the telnet service would …

  41. 7.5CVE-2022-1199EPSS 2.2%

    A flaw was found in the Linux kernel. This flaw allows an attacker to crash the Linux kernel by simulating amateur radio from the user space, resulting in a null-ptr-deref vulnerability and a use-after-free vulnerability.

  42. 4.4CVE-2022-0168EPSS 0.3%

    A denial of service (DOS) issue was found in the Linux kernel’s smb2_ioctl_query_info function in the fs/cifs/smb2ops.c Common Internet File System (CIFS) due to an incorrect return from the memdup_user function. This flaw allows a local, …

  43. 5.5CVE-2022-2980EPSS 0.9%

    NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259.

  44. 7.5CVE-2021-42521EPSS 1.3%

    There is a NULL pointer dereference vulnerability in VTK before 9.2.5, and it lies in IO/Infovis/vtkXMLTreeReader.cxx. The vendor didn't check the return value of libxml2 API 'xmlDocGetRootElement', and try to dereference it. It is unsafe …

  45. 3.3CVE-2021-4217EPSS 0.6%

    A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code e…

  46. 6.5CVE-2021-4209EPSS 1.9%

    A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare ci…

  47. 6.0CVE-2021-4158EPSS 0.4%

    A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user within the guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition.

  48. 5.5CVE-2022-2923EPSS 0.5%

    NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240.

  49. 5.5CVE-2021-3659EPSS 0.3%

    A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection. This flaw allows a local user to crash the system. The highest threat from this …

  50. 5.5CVE-2022-2874EPSS 0.5%

    NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224.