CWE-476: NULL Pointer Dereference, page 85

The product dereferences a pointer that it expects to be valid but is NULL.

What the weakness is: CWE-476 at MITRE

1. 5.5CVE-2021-46040EPSS 0.7%2022-01-06

   A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the finplace_shift_moov_meta_offsets function, which causes a Denial of Servie (context-dependent).

2. 5.5CVE-2021-46039EPSS 0.7%2022-01-06

   A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the shift_chunk_offsets.part function, which causes a Denial of Service (context-dependent).

3. 5.5CVE-2021-46038EPSS 0.6%2022-01-05

   A Pointer Dereference vulnerability exists in GPAC 1.0.1 in unlink_chunk.isra, which causes a Denial of Service (context-dependent).

4. 5.5CVE-2021-45831EPSS 0.6%2022-01-05

   A Null Pointer Dereference vulnerability exitgs in GPAC 1.0.1 in MP4Box via __strlen_avx2, which causes a Denial of Service.

5. 7.5CVE-2021-39988EPSS 0.7%2022-01-03

   The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may cause a process to restart.

6. 7.5CVE-2021-39977EPSS 0.7%2022-01-03

   The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may cause a process to restart.

7. 7.5CVE-2021-39973EPSS 0.7%2022-01-03

   There is a Null pointer dereference in Smartphones.Successful exploitation of this vulnerability may cause the kernel to break down.

8. 7.5CVE-2020-23026EPSS 1.1%2022-01-03

   A NULL pointer dereference in the main() function dhry_1.c of dhrystone 2.1 causes a denial of service (DoS).

9. 7.8CVE-2021-30272EPSS 0.2%2022-01-03

   Possible null pointer dereference in thread cache operation handler due to lack of validation of user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon …

10. 7.8CVE-2021-30271EPSS 0.2%2022-01-03

    Possible null pointer dereference in trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consume…

11. 7.8CVE-2021-30270EPSS 0.2%2022-01-03

    Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IO…

12. 7.8CVE-2021-30269EPSS 0.2%2022-01-03

    Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon In…

13. 7.5CVE-2021-4186EPSS 2.3%2021-12-30

    Crash in the Gryphon dissector in Wireshark 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file

14. 7.5CVE-2021-4188EPSS 0.9%2021-12-30

    mruby is vulnerable to NULL Pointer Dereference

15. 7.8CVE-2018-4302EPSS 0.9%2021-12-23

    A null pointer dereference was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13, iCloud for Windows 7.0, watchOS 4, iOS 11, iTunes 12.7 for Windows. Processing maliciously crafted XML may lead to an unexpe…

16. 5.5CVE-2021-45267EPSS 0.7%2021-12-22

    An invalid memory address dereference vulnerability exists in gpac 1.1.0 via the svg_node_start function, which causes a segmentation fault and application crash.

17. 7.5CVE-2021-45266EPSS 1.1%2021-12-22

    A null pointer dereference vulnerability exists in gpac 1.1.0 via the lsr_read_anim_values_ex function, which causes a segmentation fault and application crash.

18. 5.5CVE-2021-45260EPSS 0.6%2021-12-22

    A null pointer dereference vulnerability exists in gpac 1.1.0 in the lsr_read_id.part function, which causes a segmentation fault and application crash.

19. 5.5CVE-2021-45259EPSS 0.7%2021-12-22

    An Invalid pointer reference vulnerability exists in gpac 1.1.0 via the gf_svg_node_del function, which causes a segmentation fault and application crash.

20. 5.5CVE-2021-45256EPSS 0.7%2021-12-22

    A Null Pointer Dereference vulnerability existfs in nasm 2.16rc0 via asm/preproc.c.

21. 5.5CVE-2021-44927EPSS 0.7%2021-12-21

    A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_sg_vrml_mf_append function, which causes a segmentation fault and application crash.

22. 5.5CVE-2021-44926EPSS 0.6%2021-12-21

    A null pointer dereference vulnerability exists in gpac 1.1.0-DEV in the gf_node_get_tag function, which causes a segmentation fault and application crash.

23. 5.5CVE-2021-44925EPSS 0.6%2021-12-21

    A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_svg_get_attribute_name function, which causes a segmentation fault and application crash.

24. 5.5CVE-2021-44923EPSS 0.6%2021-12-21

    A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_dump_vrml_dyn_field.isra function, which causes a segmentation fault and application crash.

25. 5.5CVE-2021-44922EPSS 0.6%2021-12-21

    A null pointer dereference vulnerability exists in gpac 1.1.0 in the BD_CheckSFTimeOffset function, which causes a segmentation fault and application crash.

26. 5.5CVE-2021-44921EPSS 0.6%2021-12-21

    A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_isom_parse_movie_boxes_internal function, which causes a segmentation fault and application crash.

27. 5.5CVE-2021-44919EPSS 0.6%2021-12-21

    A Null Pointer Dereference vulnerability exists in the gf_sg_vrml_mf_alloc function in gpac 1.1.0-DEV, which causes a segmentation fault and application crash.

28. 5.5CVE-2021-44918EPSS 0.6%2021-12-21

    A Null Pointer Dereference vulnerability exists in gpac 1.1.0 in the gf_node_get_field function, which can cause a segmentation fault and application crash.

29. 5.5CVE-2021-45292EPSS 0.6%2021-12-21

    The gf_isom_hint_rtp_read function in GPAC 1.0.1 allows attackers to cause a denial of service (Invalid memory address dereference) via a crafted file in the MP4Box command.

30. 5.5CVE-2021-43750EPSS 1.4%2021-12-20

    Adobe Premiere Rush versions 1.5.16 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the cur…

31. 5.5CVE-2021-43749EPSS 1.4%2021-12-20

    Adobe Premiere Rush versions 1.5.16 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the cur…

32. 5.5CVE-2021-43748EPSS 1.4%2021-12-20

    Adobe Premiere Rush versions 1.5.16 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the cur…

33. 8.2CVE-2021-44224EPSS 82%2021-12-20

    A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a decl…

34. 7.5CVE-2021-41497EPSS 1.1%2021-12-17

    Null pointer reference in CMS_Conservative_increment_obj in RaRe-Technologies bounter version 1.01 and 1.10, allows attackers to conduct Denial of Service attacks by inputting a huge width of hash bucket.

35. 5.3CVE-2021-41495EPSS 1.2%2021-12-17

    Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &lt and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays. …

36. 7.5CVE-2021-1022EPSS 0.8%2021-12-15

    In btif_in_hf_client_generic_evt of btif_hf_client.cc, there is a possible Bluetooth service crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is…

37. 7.8CVE-2021-40826EPSS 1.3%2021-12-15

    Clementine Music Player through 1.3.1 is vulnerable to a User Mode Write Access Violation, affecting the MP3 file parsing functionality at clementine+0x3aa207. The vulnerability is triggered when the user opens a crafted MP3 file or loads …

38. 7.5CVE-2021-4110EPSS 1.7%2021-12-15

    mruby is vulnerable to NULL Pointer Dereference

39. 7.5CVE-2021-37083EPSS 0.7%2021-12-07

    There is a NULL Pointer Dereference vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Denial of Service Attacks.

40. 7.5CVE-2021-37077EPSS 0.7%2021-12-07

    There is a NULL Pointer Dereference vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to kernel crash.

41. 7.5CVE-2021-28236EPSS 1.2%2021-12-02

    LibreDWG v0.12.3 was discovered to contain a NULL pointer dereference via out_dxfb.c.

42. 6.5CVE-2020-36135EPSS 1.5%2021-12-02

    AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component rate_hist.c.

43. 6.5CVE-2020-36130EPSS 1.5%2021-12-02

    AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1_dx_iface.c.

44. 5.5CVE-2021-43016EPSS 2.1%2021-11-22

    Adobe InCopy version 16.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-servic…

45. 5.5CVE-2021-42733EPSS 1.4%2021-11-22

    Adobe Bridge version 11.1.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-serv…

46. 5.5CVE-2021-40774EPSS 1.2%2021-11-22

    Adobe Prelude version 10.1 (and earlier) is affected by a null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-servi…

47. 5.5CVE-2021-40773EPSS 1.2%2021-11-22

    Adobe Prelude version 10.1 (and earlier) is affected by a null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-servi…

48. 7.5CVE-2021-39921EPSS 3.4%2021-11-19

    NULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file

49. 7.5CVE-2021-39928EPSS 5.9%2021-11-18

    NULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file

50. 7.5CVE-2021-39920EPSS 3.3%2021-11-18

    NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file