CWE-476

Medium likelihood

NULL Pointer Dereference

Parent: CWE-710 - Improper Adherence to Coding Standards

The product dereferences a pointer that it expects to be valid but is NULL.

5,459 vulnerabilities with CWE-476
CVE-2026-20771 MEDIUM
Intel(R) QAT software drivers for Windows < 1.13 - Denial of Service via Null Pointer Dereference
CVSS 6.1
CVE-2026-28985 MEDIUM
iOS and iPadOS < 26.5 - Denial of Service via Null Pointer Dereference
CVSS 6.2
CVE-2026-8252 MEDIUM
Open5GS SMF smf_nsmf_handle_create_data_in_hsmf null pointer dereference
CVSS 4.3
CVE-2026-7262 HIGH
NULL pointer dereference in SOAP apache:Map decoder with missing <value>
CVSS 7.5
CVE-2026-7259 MEDIUM
Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()
CVSS 6.5
CVE-2026-42183 MEDIUM
Argo Workflows: SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go)
CVSS 6.5
CVE-2026-6666 MEDIUM
PgBouncer crash in kill_pool_logins_server_error
CVSS 5.9
CVE-2026-43473 MEDIUM
scsi: mpi3mr: Add NULL checks when resetting request and reply queues
CVSS 5.5
CVE-2026-43471 MEDIUM
scsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_command_trace()
CVSS 5.5
CVE-2026-43463 MEDIUM
rxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer()
CVSS 5.5
CVE-2026-43444 MEDIUM
drm/amdkfd: Unreserve bo if queue update failed
CVSS 5.5
CVE-2026-43443 MEDIUM
ASoC: amd: acp-mach-common: Add missing error check for clock acquisition
CVSS 5.5
CVE-2026-43441 HIGH
net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled
CVSS 7.5
CVE-2026-43436 MEDIUM
ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces
CVSS 5.5
CVE-2026-43431 MEDIUM
xhci: Fix NULL pointer dereference when reading portli debugfs files
CVSS 5.5
CVE-2026-43424 MEDIUM
usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling
CVSS 5.5
CVE-2026-43421 MEDIUM
usb: gadget: f_ncm: Fix net_device lifecycle with device_move
CVSS 5.5
CVE-2026-43416 MEDIUM
powerpc, perf: Check that current->mm is alive before getting user callchain
CVSS 5.5
CVE-2026-43413 MEDIUM
scsi: hisi_sas: Fix NULL pointer exception during user_scan()
CVSS 5.5
CVE-2026-43412 MEDIUM
ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start
CVSS 5.5
CVE-2026-43410 MEDIUM
firmware: stratix10-rsu: Fix NULL pointer dereference when RSU is disabled
CVSS 5.5
CVE-2026-43409 MEDIUM
kprobes: avoid crash when rmmod/insmod after ftrace killed
CVSS 5.5
CVE-2026-43408 HIGH
ceph: add a bunch of missing ceph_path_info initializers
CVSS 7.8
CVE-2026-43401 MEDIUM
cpufreq: intel_pstate: Fix NULL pointer dereference in update_cpu_qos_request()
CVSS 5.5
CVE-2026-43369 MEDIUM
Linux 6.18.16-6.18.19 and 6.19.6-6.19.9 - NULL Pointer Dereference in amdgpu_device_fini_hw
CVSS 5.5
Details
Vulnerabilities 5,459
Exploit Likelihood Medium