CWE-476: NULL Pointer Dereference, page 86

The product dereferences a pointer that it expects to be valid but is NULL.

What the weakness is: CWE-476 at MITRE

1. 5.5CVE-2021-42268EPSS 1.8%2021-11-18

   Adobe Animate version 21.0.9 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted FLA file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of…

2. 5.5CVE-2021-40761EPSS 1.4%2021-11-18

   Adobe After Effects version 18.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-…

3. 5.5CVE-2021-40756EPSS 1.4%2021-11-18

   Adobe After Effects version 18.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-…

4. 5.5CVE-2021-43668EPSS 0.3%2021-11-18

   Go-Ethereum 1.10.9 nodes crash (denial of service) after receiving a serial of messages and cannot be recovered. They will crash with "runtime error: invalid memory address or nil pointer dereference" and arise a SEGV signal.

5. 7.5CVE-2021-43667EPSS 1.3%2021-11-18

   A vulnerability has been detected in HyperLedger Fabric v1.4.0, v2.0.0, v2.1.0. This bug can be leveraged by constructing a message whose payload is nil and sending this message with the method 'forwardToLeader'. This bug has been admitted…

6. 5.5CVE-2021-42376EPSS 0.4%2021-11-15

   A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \x03 delimiter character. This may be used for DoS under very rare conditions of filt…

7. 5.5CVE-2021-42373EPSS 0.4%2021-11-15

   A NULL pointer dereference in Busybox's man applet leads to denial of service when a section name is supplied but no page argument is given

8. 5.3CVE-2021-34418EPSS 0.6%2021-11-11

   The login routine of the web console in the Zoom On-Premise Meeting Connector before version 4.6.239.20200613, Zoom On-Premise Meeting Connector MMR before version 4.6.239.20200613, Zoom On-Premise Recording Connector before version 3.8.42…

9. 7.5CVE-2020-23879EPSS 1.4%2021-11-10

   pdf2json v0.71 was discovered to contain a NULL pointer dereference in the component ObjectStream::getObject.

10. 7.5CVE-2020-23872EPSS 1.4%2021-11-10

    A NULL pointer dereference in the function TextPage::restoreState of pdf2xml v2.0 allows attackers to cause a denial of service (DoS).

11. 7.8CVE-2021-41208EPSS 0.2%2021-11-05

    TensorFlow is an open source platform for machine learning. In affected versions the code for boosted trees in TensorFlow is still missing validation. As a result, attackers can trigger denial of service (via dereferencing `nullptr`s or vi…

12. 5.5CVE-2021-41217EPSS 0.2%2021-11-05

    TensorFlow is an open source platform for machine learning. In affected versions the process of building the control flow graph for a TensorFlow model is vulnerable to a null pointer exception when nodes that should be paired are not. This…

13. 5.5CVE-2021-41215EPSS 0.2%2021-11-05

    TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for `DeserializeSparse` can trigger a null pointer dereference. This is because the shape inference function assumes that the `serial…

14. 6.5CVE-2021-27836EPSS 1.2%2021-11-03

    An issue was discoverered in in function xls_getWorkSheet in xls.c in libxls 1.6.2, allows attackers to cause a denial of service, via a crafted XLS file.

15. 5.5CVE-2021-1122EPSS 0.2%2021-10-29

    NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can dereference a NULL pointer, which may lead to denial of service.

16. 5.5CVE-2021-22471EPSS 0.1%2021-10-28

    A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may exploit this vulnerability to cause nearby process crash.

17. 5.5CVE-2021-22462EPSS 0.1%2021-10-28

    A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may exploit this vulnerability to cause kernel crash.

18. 5.5CVE-2021-22459EPSS 0.1%2021-10-28

    A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may exploit this vulnerability to cause System functions which are unavailable.

19. 5.5CVE-2021-1116EPSS 0.2%2021-10-27

    NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a NULL pointer dereference in the kernel, created within user mode code, may lead to a denial of service in the form of a system …

20. 6.5CVE-2021-1115EPSS 0.2%2021-10-27

    NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for private IOCTLs, where an attacker with local unprivileged system access may cause a NULL pointer dereference, which may lead…

21. 7.5CVE-2021-34586EPSS 14%2021-10-26

    In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests may cause a Null pointer dereference in the CODESYS web server and may result in a denial-of-service condition.

22. 7.5CVE-2021-23139EPSS 1.1%2021-10-21

    A null pointer vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an attacker to crash the CGI program on affected installations.

23. 7.5CVE-2021-1936EPSS 0.6%2021-10-20

    Null pointer dereference can occur due to lack of null check for user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

24. 8.4CVE-2021-1917EPSS 0.2%2021-10-20

    Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Wearables

25. 6.1CVE-2021-40732EPSS 2.4%2021-10-13

    XMP Toolkit version 2020.1 (and earlier) is affected by a null pointer dereference vulnerability that could result in leaking data from certain memory locations and causing a local denial of service in the context of the current user. User…

26. 6.5CVE-2021-3322EPSS 0.5%2021-10-12

    Unexpected Pointer Aliasing in IEEE 802154 Fragment Reassembly in Zephyr. Zephyr versions >= >=2.4.0 contain NULL Pointer Dereference (CWE-476). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHS…

27. 5.5CVE-2020-22674EPSS 0.8%2021-10-12

    An issue was discovered in gpac 0.8.0. An invalid memory dereference exists in the function FixTrackID located in isom_intern.c, which allows attackers to cause a denial of service (DoS) via a crafted input.

28. 6.5CVE-2021-3671EPSS 2.1%2021-10-12

    A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba server.

29. 4.4CVE-2021-25491EPSS 0.1%2021-10-06

    A vulnerability in mfc driver prior to SMR Oct-2021 Release 1 allows memory corruption via NULL-pointer dereference.

30. 9.8CVE-2021-3319EPSS 0.9%2021-10-05

    DOS: Incorrect 802154 Frame Validation for Omitted Source / Dest Addresses. Zephyr versions >= > v2.4.0 contain NULL Pointer Dereference (CWE-476), Attempt to Access Child of a Non-structure Pointer (CWE-588). For more information, see htt…

31. 7.5CVE-2021-41524EPSS 25%2021-10-05

    While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. The vulnerability was recently introduc…

32. 5.5CVE-2021-39860EPSS 2.4%2021-09-29

    Acrobat Pro DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to …

33. 5.5CVE-2021-39854EPSS 2.4%2021-09-29

    Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability …

34. 5.5CVE-2021-39853EPSS 2.2%2021-09-29

    Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability …

35. 5.5CVE-2021-39852EPSS 1.9%2021-09-29

    Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability …

36. 5.5CVE-2021-39851EPSS 1.9%2021-09-29

    Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability …

37. 5.5CVE-2021-39850EPSS 1.9%2021-09-29

    Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability …

38. 5.5CVE-2021-39849EPSS 1.9%2021-09-29

    Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability …

39. 7.5CVE-2021-32987EPSS 1.0%2021-09-23

    Null pointer dereference in SuiteLink server while processing command 0x0b

40. 7.5CVE-2021-32979EPSS 1.0%2021-09-23

    Null pointer dereference in SuiteLink server while processing commands 0x04/0x0a

41. 7.5CVE-2021-32971EPSS 1.0%2021-09-23

    Null pointer dereference in SuiteLink server while processing command 0x07

42. 7.5CVE-2021-32963EPSS 1.0%2021-09-23

    Null pointer dereference in SuiteLink server while processing commands 0x03/0x10

43. 5.5CVE-2021-39598EPSS 0.7%2021-09-20

    An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function callcode() located in code.c. It allows an attacker to cause Denial of Service.

44. 5.5CVE-2021-39597EPSS 0.7%2021-09-20

    An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function code_dump2() located in code.c. It allows an attacker to cause Denial of Service.

45. 5.5CVE-2021-39596EPSS 0.7%2021-09-20

    An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function code_parse() located in code.c. It allows an attacker to cause Denial of Service.

46. 5.5CVE-2021-39594EPSS 0.7%2021-09-20

    Other An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function updateusage() located in swftext.c. It allows an attacker to cause Denial of Service.

47. 5.5CVE-2021-39593EPSS 0.7%2021-09-20

    An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swf_FontExtract_DefineFontInfo() located in swftext.c. It allows an attacker to cause Denial of Service.

48. 5.5CVE-2021-39592EPSS 0.7%2021-09-20

    An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function pool_lookup_uint() located in pool.c. It allows an attacker to cause Denial of Service.

49. 5.5CVE-2021-39591EPSS 0.7%2021-09-20

    An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swf_GetShapeBoundingBox() located in swfshape.c. It allows an attacker to cause Denial of Service.

50. 5.5CVE-2021-39590EPSS 0.7%2021-09-20

    An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function params_dump() located in abc.c. It allows an attacker to cause Denial of Service.