CWE-476— NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.— MITRE CWE catalog

5,944 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-476page 8 of 119

CVE-2024-53024HIGHCVSS 7.8EG 7.8
2025-03-03
Memory corruption in display driver while detaching a device.
CVE-2024-55511HIGHCVSS 7.8EG 7.8
2025-01-16
A null pointer dereference vulnerability in Macrium Reflect prior to 8.1.8017 allows a local attacker to cause a system crash or potentially elevate their privileges via executing a specially crafted executable.
CVE-2024-57798HIGHCVSS 7.8EG 7.8
2025-01-11
In the Linux kernel, the following vulnerability has been resolved: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() While receiving an MST up request message from one thread in drm_dp_mst_handle_up_req(), th…
CVE-2024-56669HIGHCVSS 7.8EG 7.8
2024-12-27
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Remove cache tags before disabling ATS The current implementation removes cache tags after disabling ATS, leading to potential memory leaks and kernel crashe…
CVE-2024-45156HIGHCVSS 7.8EG 7.8
2024-12-10
Animate versions 23.0.8, 24.0.5 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in …
CVE-2022-48735HIGHCVSS 7.8EG 7.8
2024-06-20
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Fix UAF of leds class devs at unbinding The LED class devices that are created by HD-audio codec drivers are registered via devm_led_classdev_register() and a…
CVE-2021-47565HIGHCVSS 7.8EG 7.8
2024-05-24
In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix kernel panic during drive powercycle test While looping over shost's sdev list it is possible that one of the drives is getting removed and its sas_ta…
CVE-2021-47386HIGHCVSS 7.8EG 7.8
2024-05-21
In the Linux kernel, the following vulnerability has been resolved: hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field If driver read val value sufficient for (val & 0x08) && (!(val & 0x80)) && ((val & …
CVE-2024-30295HIGHCVSS 7.8EG 7.8
2024-05-16
Animate versions 24.0.2, 23.0.5 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in …
CVE-2024-30030HIGHCVSS 7.8EG 7.8
2024-05-14
Win32k Elevation of Privilege Vulnerability
CVE-2024-27061HIGHCVSS 7.8EG 7.8
2024-05-01
In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ce - Fix use after free in unprepare sun8i_ce_cipher_unprepare should be called before crypto_finalize_skcipher_request, because client callbacks may immed…
CVE-2024-26793HIGHCVSS 7.8EG 7.8
2024-04-04
In the Linux kernel, the following vulnerability has been resolved: gtp: fix use-after-free and null-ptr-deref in gtp_newlink() The gtp_link_ops operations structure for the subsystem must be registered after registering the gtp_net_ops …
CVE-2024-26754HIGHCVSS 7.8EG 7.8
2024-04-03
In the Linux kernel, the following vulnerability has been resolved: gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() The gtp_net_ops pernet operations structure for the subsystem must be registered before registering the…
CVE-2024-0035HIGHCVSS 7.8EG 7.8
2024-02-16
In onNullBinding of TileLifecycleManager.java, there is a possible way to launch an activity from the background due to a missing null check. This could lead to local escalation of privilege with no additional execution privileges needed. …
CVE-2023-5972HIGHCVSS 7.8EG 7.8
2023-11-23
A null pointer dereference flaw was found in the nft_inner.c functionality of netfilter in the Linux kernel. This issue could allow a local user to crash the system or escalate their privileges on the system.
CVE-2023-5586HIGHCVSS 7.8EG 7.8
2023-10-15
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3.0-DEV.
CVE-2023-32008HIGHCVSS 7.8EG 7.8
2023-06-14
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVE-2023-3012HIGHCVSS 7.8EG 7.8
2023-05-31
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.2.2.
CVE-2022-42335HIGHCVSS 7.8EG 7.8
2023-04-25
x86 shadow paging arbitrary pointer dereference In environments where host assisted address translation is necessary but Hardware Assisted Paging (HAP) is unavailable, Xen will run guests in so called shadow mode. Due to too lax a check in…
CVE-2023-24910HIGHCVSS 7.8EG 7.8
2023-03-14
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2022-47024HIGHCVSS 7.8EG 7.8
2023-01-20
A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts.
CVE-2022-47021HIGHCVSS 7.8EG 7.8
2023-01-20
A null pointer dereference issue was discovered in functions op_get_data and op_open1 in opusfile.c in xiph opusfile 0.9 thru 0.12 allows attackers to cause denial of service or other unspecified impacts.
CVE-2022-47094HIGHCVSS 7.8EG 7.8
2023-01-05
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Null pointer dereference via filters/dmx_m2ts.c:343 in m2tsdmx_declare_pid
CVE-2022-38928HIGHCVSS 7.8EG 7.8
2022-09-21
XPDF 4.04 is vulnerable to Null Pointer Dereference in FoFiType1C.cc:2393.
CVE-2022-24577HIGHCVSS 7.8EG 7.8
2022-03-14
GPAC 1.0.1 is affected by a NULL pointer dereference in gf_utf8_wcslen. (gf_utf8_wcslen is a renamed Unicode utf8_wcslen function.)
CVE-2021-26948HIGHCVSS 7.8EG 7.8
2022-03-03
Null pointer dereference in the htmldoc v1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of service via a crafted html file.
CVE-2021-23191HIGHCVSS 7.8EG 7.8
2022-03-02
A security issue was found in htmldoc v1.9.12 and before. A NULL pointer dereference in the function image_load_jpeg() in image.cxx may result in denial of service.
CVE-2021-23180HIGHCVSS 7.8EG 7.8
2022-03-02
A flaw was found in htmldoc in v1.9.12 and before. Null pointer dereference in file_extension(),in file.c may lead to execute arbitrary code and denial of service.
CVE-2022-23222HIGHCVSS 7.8EG 7.8
2022-01-14
kernel/bpf/verifier.c in the Linux kernel through 5.15.14 allows local users to gain privileges because of the availability of pointer arithmetic via certain *_OR_NULL pointer types.
CVE-2018-4302HIGHCVSS 7.8EG 7.8
2021-12-23
A null pointer dereference was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13, iCloud for Windows 7.0, watchOS 4, iOS 11, iTunes 12.7 for Windows. Processing maliciously crafted XML may lead to an unexpe…
CVE-2021-40826HIGHCVSS 7.8EG 7.8
2021-12-15
Clementine Music Player through 1.3.1 is vulnerable to a User Mode Write Access Violation, affecting the MP3 file parsing functionality at clementine+0x3aa207. The vulnerability is triggered when the user opens a crafted MP3 file or loads …
CVE-2021-32284HIGHCVSS 7.8EG 7.8
2021-09-20
An issue was discovered in gravity through 0.8.1. A NULL pointer dereference exists in the function ircode_register_pop_context_protect() located in gravity_ircode.c. It allows an attacker to cause Denial of Service.
CVE-2021-40157HIGHCVSS 7.8EG 7.8
2021-09-15
A user may be tricked into opening a malicious FBX file which may exploit an Untrusted Pointer Dereference vulnerability in FBX’s Review version 1.5.0 and prior causing it to run arbitrary code on the system.
CVE-2021-39251HIGHCVSS 7.8EG 7.8
2021-09-07
A crafted NTFS image can cause a NULL pointer dereference in ntfs_extent_inode_open in NTFS-3G < 2021.8.22.
CVE-2021-37689HIGHCVSS 7.8EG 7.8
2021-08-12
TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can craft a TFLite model that would trigger a null pointer dereference, which would result in a crash and denial of service. This is ca…
CVE-2021-37688HIGHCVSS 7.8EG 7.8
2021-08-12
TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can craft a TFLite model that would trigger a null pointer dereference, which would result in a crash and denial of service. The [imple…
CVE-2021-37681HIGHCVSS 7.8EG 7.8
2021-08-12
TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of SVDF in TFLite is [vulnerable to a null pointer error](https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61a…
CVE-2021-37648HIGHCVSS 7.8EG 7.8
2021-08-12
TensorFlow is an end-to-end open source platform for machine learning. In affected versions the code for `tf.raw_ops.SaveV2` does not properly validate the inputs and an attacker can trigger a null pointer dereference. The [implementation]…
CVE-2019-14584HIGHCVSS 7.8EG 7.8
2021-06-03
Null pointer dereference in Tianocore EDK2 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2021-30500HIGHCVSS 7.8EG 7.8
2021-05-27
Null pointer dereference was found in upx PackLinuxElf::canUnpack() in p_lx_elf.cpp,in version UPX 4.0.0. That allow attackers to execute arbitrary code and cause a denial of service via a crafted file.
CVE-2020-35982HIGHCVSS 7.8EG 7.8
2021-04-21
An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference in the function gf_hinter_track_finalize() in media_tools/isom_hinter.c.
CVE-2020-35981HIGHCVSS 7.8EG 7.8
2021-04-21
An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference in the function SetupWriters() in isomedia/isom_store.c.
CVE-2021-26235HIGHCVSS 7.8EG 7.8
2021-03-18
FastStone Image Viewer <= 7.5 is affected by a user mode write access violation near NULL at 0x005bdfc9, triggered when a user opens or views a malformed CUR file that is mishandled by FSViewer.exe. Attackers could exploit this issue for a…
CVE-2021-22649HIGHCVSS 7.8EG 7.8
2021-02-23
Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 have multiple NULL pointer dereference issues while proce…
CVE-2021-25176HIGHCVSS 7.8EG 7.8
2021-01-18
An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A NULL pointer dereference exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of servic…
CVE-2020-27289HIGHCVSS 7.8EG 7.8
2021-01-11
Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a null pointer dereference issue while processing project files, which may allow an attacker to execute arbitrary code.
CVE-2020-27277HIGHCVSS 7.8EG 7.8
2021-01-11
Delta Electronics DOPSoft Version 4.0.8.21 and prior has a null pointer dereference issue while processing project files, which may allow an attacker to execute arbitrary code.
CVE-2020-14356HIGHCVSS 7.8EG 7.8
2020-08-19
A flaw null pointer dereference in the Linux kernel cgroupv2 subsystem in versions before 5.7.10 was found in the way when reboot the system. A local user could use this flaw to crash the system or escalate their privileges on the system.
CVE-2020-5966HIGHCVSS 7.8EG 7.8
2020-06-25
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, in which a NULL pointer is dereferenced, leading to denial of service or potential escalation of p…
CVE-2020-0219HIGHCVSS 7.8EG 7.8
2020-06-11
In onCreate of SliceDeepLinkSpringBoard.java there is a possible insecure Intent. This could lead to local elevation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: Andr…

Map vulnerabilities like CWE-476 to your infrastructure

EchelonGraph correlates every CVE — across CWE-476 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Book a Demo →