cve.bz

CWE-476: NULL Pointer Dereference, page 80

Filter

The product dereferences a pointer that it expects to be valid but is NULL.

What the weakness is: CWE-476 at MITRE

Ask an AI about CWE-476

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-476: NULL Pointer Dereference and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/476.html and https://cve.bz/cve/cwe/476?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.5CVE-2022-36186EPSS 0.9%

    A Null Pointer dereference vulnerability exists in GPAC 2.1-DEV-revUNKNOWN-master via the function gf_filter_pid_set_property_full () at filter_core/filter_pid.c:5250,which causes a Denial of Service (DoS). This vulnerability was fixed in …

  2. 5.5CVE-2022-36153EPSS 0.3%

    tifig v0.2.2 was discovered to contain a segmentation violation via std::vector<unsigned int, std::allocator<unsigned int> >::size() const at /bits/stl_vector.h.

  3. 5.5CVE-2022-36151EPSS 0.3%

    tifig v0.2.2 was discovered to contain a segmentation violation via getType() at /common/bbox.cpp.

  4. 6.5CVE-2022-35484EPSS 0.9%

    OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6b6a8f.

  5. 5.5CVE-2022-35108EPSS 0.3%

    SWFTools commit 772e55a2 was discovered to contain a segmentation violation via DCTStream::getChar() at /xpdf/Stream.cc.

  6. 7.5CVE-2022-2832EPSS 1.8%

    A flaw was found in Blender 3.3.0. A null pointer dereference exists in source/blender/gpu/opengl/gl_backend.cc that may lead to loss of confidentiality and integrity.

  7. 6.5CVE-2022-20334EPSS 0.2%

    In Bluetooth, there are possible process crashes due to dereferencing a null pointer. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: Andr…

  8. 6.5CVE-2022-20333EPSS 0.2%

    In Bluetooth, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Andr…

  9. 7.5CVE-2022-26979EPSS 1.1%

    Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow a NULL pointer dereference when this.Span is used for oState of Collab.addStateModel, because this.Span.text can be NULL.

  10. 7.5CVE-2022-27944EPSS 1.1%

    Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow an exportXFAData NULL pointer dereference.

  11. 5.5CVE-2022-31618EPSS 0.2%

    NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can dereference a null pointer, which may lead to denial of service.

  12. 7.5CVE-2022-35245EPSS 0.8%

    In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5.1, when a BIG-IP APM access policy is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to ter…

  13. 7.5CVE-2022-34651EPSS 0.8%

    In BIG-IP Versions 16.1.x before 16.1.3.1 and 15.1.x before 15.1.6.1, when an LTM Client or Server SSL profile with TLS 1.3 enabled is configured on a virtual server, along with an iRule that calls HTTP::respond, undisclosed requests can c…

  14. 7.5CVE-2022-34969EPSS 0.9%

    PingCAP TiDB v6.1.0 was discovered to contain a NULL pointer dereference.

  15. 7.5CVE-2022-25867EPSS 1.7%

    The package io.socket:socket.io-client before 2.0.1 are vulnerable to NULL Pointer Dereference when parsing a packet with with invalid payload format.

  16. 5.5CVE-2022-34556EPSS 0.3%

    PicoC v3.2.2 was discovered to contain a NULL pointer dereference at variable.c.

  17. 5.5CVE-2022-2549EPSS 0.6%

    NULL Pointer Dereference in GitHub repository gpac/gpac prior to v2.1.0-DEV.

  18. 7.1CVE-2022-1671EPSS 0.3%

    A NULL pointer dereference flaw was found in rxrpc_preparse_s in net/rxrpc/server_key.c in the Linux kernel. This flaw allows a local attacker to crash the system or leak internal kernel information.

  19. 5.5CVE-2021-33466EPSS 0.3%

    An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expand_smacro() in modules/preprocs/nasm/nasm-pp.c.

  20. 5.5CVE-2021-33465EPSS 0.3%

    An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expand_mmacro() in modules/preprocs/nasm/nasm-pp.c.

  21. 5.5CVE-2021-33463EPSS 0.3%

    An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in yasm_expr__copy_except() in libyasm/expr.c.

  22. 5.5CVE-2021-33460EPSS 0.3%

    An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in if_condition() in modules/preprocs/nasm/nasm-pp.c.

  23. 5.5CVE-2021-33459EPSS 0.3%

    An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in nasm_parser_directive() in modules/parsers/nasm/nasm-parse.c.

  24. 5.5CVE-2021-33458EPSS 0.3%

    An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in find_cc() in modules/preprocs/nasm/nasm-pp.c.

  25. 5.5CVE-2021-33457EPSS 0.3%

    An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expand_mmac_params() in modules/preprocs/nasm/nasm-pp.c.

  26. 5.5CVE-2021-33456EPSS 0.3%

    An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in hash() in modules/preprocs/nasm/nasm-pp.c.

  27. 5.5CVE-2021-33455EPSS 0.3%

    An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in do_directive() in modules/preprocs/nasm/nasm-pp.c.

  28. 5.5CVE-2021-33454EPSS 0.3%

    An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in yasm_expr_get_intnum() in libyasm/expr.c.

  29. 5.5CVE-2021-33449EPSS 0.3%

    An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_bcode_part_get_by_offset() in mjs.c.

  30. 5.5CVE-2021-33447EPSS 0.3%

    An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_print() in mjs.c.

  31. 5.5CVE-2021-33446EPSS 0.3%

    An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_next() in mjs.c.

  32. 5.5CVE-2021-33445EPSS 0.3%

    An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_string_char_code_at() in mjs.c.

  33. 5.5CVE-2021-33444EPSS 0.3%

    An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in getprop_builtin_foreign() in mjs.c.

  34. 5.5CVE-2021-33442EPSS 0.3%

    An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in json_printf() in mjs.c.

  35. 5.5CVE-2021-33441EPSS 0.3%

    An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in exec_expr() in mjs.c.

  36. 5.5CVE-2021-33440EPSS 0.3%

    An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_bcode_commit() in mjs.c.

  37. 5.5CVE-2021-33439EPSS 0.3%

    An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is Integer overflow in gc_compact_strings() in mjs.c.

  38. 8.1CVE-2022-1130EPSS 0.9%

    Insufficient validation of trust input in WebOTP in Google Chrome on Android prior to 100.0.4896.60 allowed a remote attacker to send arbitrary intents from any app via a malicious app.

  39. 5.5CVE-2022-34520EPSS 0.3%

    Radare2 v5.7.2 was discovered to contain a NULL pointer dereference via the function r_bin_file_xtr_load_buffer at bin/bfile.c. This vulnerability allows attackers to cause a Denial of Service (DOS) via a crafted binary file.

  40. 5.1CVE-2020-36558EPSS 0.3%

    A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and general protection fault.

  41. 6.5CVE-2022-22210EPSS 0.3%

    A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on QFX5000 Series and MX Series allows an unauthenticated adjacent attacker to cause a Denial of Service (DoS). On QFX5K Series and…

  42. 5.5CVE-2022-2476EPSS 0.4%

    A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL ===================================================================84257==ERROR: AddressSanitizer: SEGV on unknown addre…

  43. 7.5CVE-2022-31213EPSS 2.3%

    An issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found when supplying a malformed XML config file.

  44. 7.5CVE-2022-32298EPSS 1.1%

    Toybox v0.8.7 was discovered to contain a NULL pointer dereference via the component httpd.c. This vulnerability can lead to a Denial of Service (DoS) via unspecified vectors.

  45. 7.5CVE-2022-34761EPSS 0.9%

    A CWE-476: NULL Pointer Dereference vulnerability exists that could cause a denial of service of the webserver when parsing JSON content type. Affected Products: X80 advanced RTU Communication Module (BMENOR2200H) (V2.01 and later), OPC UA…

  46. 7.5CVE-2022-34736EPSS 0.7%

    The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability.

  47. 7.5CVE-2022-34735EPSS 0.7%

    The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability.

  48. 7.5CVE-2022-2309EPSS 2.4%

    NULL Pointer Dereference allows attackers to cause a denial of service (or application crash). This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggerin…

  49. 5.5CVE-2022-2279EPSS 0.6%

    NULL Pointer Dereference in GitHub repository bfabiszewski/libmobi prior to 0.11.

  50. 5.5CVE-2022-1852EPSS 0.3%

    A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in the x86_emulate_insn in arch/x86/kvm/emulate.c. This flaw occurs while executing an illegal instruction in guest in the In…