CWE-476

Medium likelihood

NULL Pointer Dereference

Parent: CWE-710 - Improper Adherence to Coding Standards

The product dereferences a pointer that it expects to be valid but is NULL.

5,319 vulnerabilities with CWE-476
CVE-2021-20299 HIGH
OpenEXR - Denial of Service via Multipart Input File NULL Pointer Dereference
CVSS 7.5
CVE-2021-42577 HIGH
Softing OPC UA C++ SDK < 5.70.0 - Denial of Service via Malformed OPC/UA Abort Packet
CVSS 7.5
CVE-2021-4095 MEDIUM
Linux Kernel < 5.17-rc1 - Denial of Service via KVM Dirty Ring Logging
CVSS 5.5
CVE-2021-3739 HIGH
Linux Kernel - NULL Pointer Dereference
CVSS 7.1
CVE-2021-34122 MEDIUM
rockcarry ffjpeg < 2021-03-16 - NULL Pointer Dereference in bitstr_tell
CVSS 5.5
CVE-2021-4198 MEDIUM
Bitdefender Antivirus Plus < 26.0.3.29 - Denial of Service via messaging_ipc.dll NULL Pointer Dereference
CVSS 6.1
CVE-2021-26948 HIGH
htmldoc v1.9.11 and before - Null Pointer Dereference via Crafted HTML File
CVSS 7.8
CVE-2021-23191 HIGH
htmldoc < 1.9.12 - Denial of Service via NULL Pointer Dereference in image_load_jpeg()
CVSS 7.8
CVE-2021-23180 HIGH
htmldoc < 1.9.12 - Null Pointer Dereference in file_extension()
CVSS 7.8
CVE-2021-3596 MEDIUM
ImageMagick <7.0.10-31 - NULL Pointer Dereference
CVSS 6.5
CVE-2021-43824 HIGH
Envoy < 1.18.6 - Denial of Service via CONNECT Request to JWT Filter with Regex Match
CVSS 7.5
CVE-2021-44960 MEDIUM
Svgpp - NULL Pointer Dereference
CVSS 6.5
CVE-2021-44879 MEDIUM
Linux Kernel < 5.16.3 - NULL Pointer Dereference in F2FS gc_data_segment
CVSS 5.5
CVE-2021-45385 MEDIUM
ffjpeg d5cfd49 - Null Pointer Dereference in bmp_load()
CVSS 6.5
CVE-2021-35075 HIGH
Snapdragon Auto-Mobile-Industrial-IOT - Null Pointer Dereference
CVSS 8.4
CVE-2021-35068 HIGH
Qualcomm APQ8009W Firmware - NULL Pointer Dereference in Bluetooth HFP Protocol
CVSS 8.4
CVE-2021-33068 MEDIUM
Intel Active Management Technology Firmware < 15.0.35 - Authenticated Denial of Service via Null Pointer Dereference
CVSS 6.5
CVE-2021-0111 MEDIUM
Intel Atom and Core i3 Processors - Privilege Escalation via NULL Pointer Dereference
CVSS 6.7
CVE-2021-4043 MEDIUM
gpac/gpac <1.1.0 - NULL Pointer Dereference
CVSS 5.5
CVE-2021-46664 MEDIUM
MariaDB 10.2.0-10.2.42 - Denial of Service via NULL Value in sub_select_postjoin_aggr
CVSS 5.5
CVE-2021-45079 CRITICAL
strongSwan < 5.9.5 - Unauthenticated EAP-Success Spoofing via Early Response
CVSS 9.1
CVE-2021-22570 MEDIUM
Google Protobuf < 3.15.0 - Null Pointer Dereference via Proto Symbol Parsing
CVSS 6.5
CVE-2021-4145 MEDIUM
QEMU < 6.2.0 - Denial of Service via NULL Pointer Dereference in Block Mirror Layer
CVSS 6.5
CVE-2021-45847 MEDIUM
Slic3r libslic3r <1.3.0 - Code Injection
CVSS 5.5
CVE-2021-45846 MEDIUM
Slic3r libslic3r <1.3.0 - Code Injection
CVSS 5.5
Details
Vulnerabilities 5,319
Exploit Likelihood Medium