cve.bz

CWE-476: NULL Pointer Dereference, page 83

Filter

The product dereferences a pointer that it expects to be valid but is NULL.

What the weakness is: CWE-476 at MITRE

Ask an AI about CWE-476

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-476: NULL Pointer Dereference and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/476.html and https://cve.bz/cve/cwe/476?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.5CVE-2021-42577EPSS 1.0%

    An issue was discovered in Softing OPC UA C++ SDK before 5.70. A malformed OPC/UA message abort packet makes the client crash with a NULL pointer dereference.

  2. 5.5CVE-2022-0908EPSS 1.2%

    Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff versions up to 4.3.0 could lead to Denial of Service via crafted TIFF file.

  3. 5.5CVE-2022-25108EPSS 0.9%

    Foxit PDF Reader and Editor before 11.2.1 and PhantomPDF before 10.1.7 allow a NULL pointer dereference during PDF parsing because the pointer is used without proper validation.

  4. 5.5CVE-2022-0433EPSS 0.3%

    A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the map_get_next_key function of the BPF bloom filter. This flaw allows a local user to crash the system. This flaw affects Linux kern…

  5. 5.5CVE-2021-4095EPSS 0.4%

    A NULL pointer dereference was found in the Linux kernel's KVM when dirty ring logging is enabled without an active vCPU context. An unprivileged local attacker on the host may use this flaw to cause a kernel oops condition and thus a deni…

  6. 7.1CVE-2021-3739EPSS 0.6%

    A NULL pointer dereference flaw was found in the btrfs_rm_device function in fs/btrfs/volumes.c in the Linux Kernel, where triggering the bug requires ‘CAP_SYS_ADMIN’. This flaw allows a local attacker to crash the system or leak kernel in…

  7. 5.5CVE-2021-34122EPSS 0.8%

    The function bitstr_tell at bitstr.c in ffjpeg commit 4ab404e has a NULL pointer dereference.

  8. 5.5CVE-2022-0890EPSS 0.8%

    NULL Pointer Dereference in GitHub repository mruby/mruby prior to 3.2.

  9. 6.1CVE-2021-4198EPSS 0.5%

    A NULL Pointer Dereference vulnerability in the messaging_ipc.dll component as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools, VPN Standalone allows an attacker to arbitrarily crash product p…

  10. 7.8CVE-2021-26948EPSS 0.8%

    Null pointer dereference in the htmldoc v1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of service via a crafted html file.

  11. 7.8CVE-2021-23191EPSS 1.1%

    A security issue was found in htmldoc v1.9.12 and before. A NULL pointer dereference in the function image_load_jpeg() in image.cxx may result in denial of service.

  12. 7.8CVE-2021-23180EPSS 1.4%

    A flaw was found in htmldoc in v1.9.12 and before. Null pointer dereference in file_extension(),in file.c may lead to execute arbitrary code and denial of service.

  13. 6.5CVE-2021-3596EPSS 1.9%

    A NULL pointer dereference flaw was found in ImageMagick in versions prior to 7.0.10-31 in ReadSVGImage() in coders/svg.c. This issue is due to not checking the return value from libxml2's xmlCreatePushParserCtxt() and uses the value direc…

  14. 7.5CVE-2021-43824EPSS 1.1%

    Envoy is an open source edge and service proxy, designed for cloud-native applications. In affected versions a crafted request crashes Envoy when a CONNECT request is sent to JWT filter configured with regex match. This provides a denial o…

  15. 5.5CVE-2022-0712EPSS 0.9%

    NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.4.

  16. 5.5CVE-2022-0696EPSS 1.5%

    NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4428.

  17. 5.5CVE-2022-0632EPSS 0.8%

    NULL Pointer Dereference in Homebrew mruby prior to 3.2.

  18. 4.6CVE-2022-25258EPSS 0.9%

    An issue was discovered in drivers/usb/gadget/composite.c in the Linux kernel before 5.16.10. The USB Gadget subsystem lacks certain validation of interface OS descriptor requests (ones with a large array index and ones associated with NUL…

  19. 5.5CVE-2022-23199EPSS 1.7%

    Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in…

  20. 5.5CVE-2022-23198EPSS 1.7%

    Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in…

  21. 5.5CVE-2022-23189EPSS 1.7%

    Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in…

  22. 5.5CVE-2022-0617EPSS 0.5%

    A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers udf_file_write_iter function for the malicious UDF image. A local user could use this flaw to crash the system. Actual fro…

  23. 6.5CVE-2021-44960EPSS 1.2%

    In SVGPP SVG++ library 1.3.0, the XMLDocument::getRoot function in the renderDocument function handled the XMLDocument object improperly, returning a null pointer in advance at the second if, resulting in a null pointer reference behind th…

  24. 9.8CVE-2022-0582EPSS 2.0%

    Unaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file

  25. 5.5CVE-2021-44879EPSS 1.5%

    In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL pointer dereference.

  26. 5.5CVE-2022-0562EPSS 1.2%

    Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tif_dirread.c in libtiff versions from 4.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sou…

  27. 5.5CVE-2022-0561EPSS 1.2%

    Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from…

  28. 6.5CVE-2021-45385EPSS 0.9%

    A Null Pointer Dereference vulnerability exits in ffjpeg d5cfd49 (2021-12-06) in bmp_load(). When the size information in metadata of the bmp is out of range, it returns without assign memory buffer to `pb->pdata` and did not exit the prog…

  29. 7.8CVE-2021-35075EPSS 0.2%

    Possible null pointer dereference due to lack of WDOG structure validation during registration in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

  30. 9.8CVE-2021-35068EPSS 0.5%

    Lack of null check while freeing the device information buffer in the Bluetooth HFP protocol can lead to a NULL pointer dereference in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Indust…

  31. 6.5CVE-2021-33068EPSS 0.8%

    Null pointer dereference in subsystem for Intel(R) AMT before versions 15.0.35 may allow an authenticated user to potentially enable denial of service via network access.

  32. 6.7CVE-2021-0111EPSS 0.3%

    NULL pointer dereference in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.

  33. 5.5CVE-2022-21815EPSS 0.2%

    NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for private IOCTLs where a NULL pointer dereference in the kernel, created within user mode code, may lead to a denial of servic…

  34. 6.5CVE-2022-23595EPSS 0.8%

    Tensorflow is an Open Source Machine Learning Framework. When building an XLA compilation cache, if default settings are used, TensorFlow triggers a null pointer dereference. In the default scenario, all devices are allowed, so `flr->confi…

  35. 6.5CVE-2022-23589EPSS 1.1%

    Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, Grappler component of TensorFlow can trigger a null pointer dereference. There are 2 places where this can occur, for the same malicious alteration of a `Sav…

  36. 6.5CVE-2022-23577EPSS 0.8%

    Tensorflow is an Open Source Machine Learning Framework. The implementation of `GetInitOp` is vulnerable to a crash caused by dereferencing a null pointer. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit o…

  37. 6.5CVE-2022-23570EPSS 1.0%

    Tensorflow is an Open Source Machine Learning Framework. When decoding a tensor from protobuf, TensorFlow might do a null-dereference if attributes of some mutable arguments to some operations are missing from the proto. This is guarded by…

  38. 7.5CVE-2022-0481EPSS 0.9%

    NULL Pointer Dereference in Homebrew mruby prior to 3.2.

  39. 5.5CVE-2021-4043EPSS 4.6%

    NULL Pointer Dereference in GitHub repository gpac/gpac prior to 1.1.0.

  40. 5.5CVE-2022-24249EPSS 0.6%

    A Null Pointer Dereference vulnerability exists in GPAC 1.1.0 via the xtra_box_write function in /box_code_base.c, which causes a Denial of Service. This vulnerability was fixed in commit 71f9871.

  41. 6.5CVE-2022-21739EPSS 0.8%

    Tensorflow is an Open Source Machine Learning Framework. The implementation of `QuantizedMaxPool` has an undefined behavior where user controlled inputs can trigger a reference binding to null pointer. The fix will be included in TensorFlo…

  42. 6.5CVE-2022-21736EPSS 0.8%

    Tensorflow is an Open Source Machine Learning Framework. The implementation of `SparseTensorSliceDataset` has an undefined behavior: under certain condition it can be made to dereference a `nullptr` value. The 3 input arguments to `SparseT…

  43. 7.5CVE-2022-22510EPSS 1.0%

    Codesys Profinet in version V4.2.0.0 is prone to null pointer dereference that allows a denial of service (DoS) attack of an unauthenticated user via SNMP.

  44. 5.5CVE-2022-0419EPSS 0.9%

    NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.0.

  45. 5.5CVE-2021-46664EPSS 0.4%

    MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr.

  46. 5.5CVE-2022-0286EPSS 0.5%

    A flaw was found in the Linux kernel. A null pointer dereference in bond_ipsec_add_sa() may lead to local denial of service.

  47. 9.1CVE-2021-45079EPSS 2.8%

    In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2) even w…

  48. 5.5CVE-2021-22570EPSS 2.7%

    Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error message. Since the symbol is incorrectly …

  49. 7.5CVE-2022-23025EPSS 0.9%

    On BIG-IP version 16.1.x before 16.1.1, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, when a SIP ALG profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (…

  50. 7.5CVE-2022-23022EPSS 0.9%

    On BIG-IP version 16.1.x before 16.1.2, when an HTTP profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technic…