← Back to feed Search feed

CWE-476 NULL Pointer Dereference vulnerabilities

143 CVEs — updated 2026-11-02 · vulnfeed

CVE / IDTitleSeverityCVSSEPSSSourceDate
CVE-2026-111107A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows a remote, unauthenticatHIGH8.729%ileNVD2026-10-27
CVE-2026-111733P-Net before 1.0.3 dereferences a NULL AR pointer when handling an implicit read request without a valid target AR UUID HIGH8.734%ileNVD2026-10-29
CVE-2026-111736P-Net before 1.0.3 dereferences a NULL AR pointer in pf_fspm_cm_read_ind() when handling an implicit read request withouHIGH8.734%ileNVD2026-10-29
CVE-2026-119760sniproxy through 0.7.0 contains a NULL pointer dereference vulnerability in resolv_cancel() that allows remote unauthentHIGH8.741%ileNVD2026-10-30
CVE-2026-114408In Eclipse ThreadX NetX Duo versions 6.4.5.202504 through 6.5.2.202603a, built with IPv6 path MTU discovery, the ICMPv6 HIGH8.7—NVD2026-11-02
CVE-2026-117610libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProcessor2() in lib/xmlparHIGH8.237%ileNVD2026-10-28
CVE-2026-57195Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2HIGH7.547%ileNVD2026-10-27
CVE-2026-119188Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, theHIGH7.535%ileNVD2026-10-29
CVE-2026-62966ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350. Prior to vHIGH7.537%ileNVD2026-10-30
CVE-2026-77207Null Pointer Dereference in PKCS#7 bundle with no certificatesHIGH7.540%ileMicrosoft2026-10-13
CVE-2026-77206IKEv2 pre-authentication Null Pointer Dereference in EAP codeHIGH7.552%ileMicrosoft2026-10-13
CVE-2026-19888NULL pointer dereference in SCRAM client-final-message parsing in PgBouncerHIGH7.533%ileMicrosoft2026-09-08
CVE-2026-78130strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser.HIGH7.528%ileMicrosoft2026-09-08
CVE-2026-55204HAProxy - NULL Pointer Dereference in hpack_dht_insert FunctionHIGH7.542%ileMicrosoft2026-06-09
CVE-2026-57434Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classesHIGH7.540%ileMicrosoft2026-06-09
CVE-2026-42764NULL Pointer Dereference in QUIC Server Initial Packet HandlingHIGH7.567%ileMicrosoft2026-06-09
CVE-2025-59777NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in coHIGH7.542%ileMicrosoft2025-11-11
CVE-2025-62689NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in coHIGH7.542%ileMicrosoft2025-11-11
CVE-2025-32913Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is presentHIGH7.558%ileMicrosoft2025-04-08
CVE-2026-116740libcss through 0.9.2 contains a NULL pointer dereference vulnerability in mq_parse_media_query() that allows remote attaHIGH7.126%ileNVD2026-10-26
CVE-2025-37800driver core: fix potential NULL pointer dereference in dev_uevent()HIGH7.111%ileMicrosoft2025-05-13
CVE-2026-120454The Sleuth Kit through 4.15.0 contains a NULL pointer dereference vulnerability in decmpfs_decompress_lzvn_attr() that aMEDIUM6.8—NVD2026-11-02
CVE-2026-116658Tanium addressed a denial of service vulnerability in Enforce.MEDIUM6.527%ileNVD2026-10-27
CVE-2026-117548A NULL pointer dereference flaw was found in 389-ds-base. This flaw occurs when a ModifyDN (rename) operation uses an atMEDIUM6.527%ileNVD2026-10-29
CVE-2026-119842A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted subtitle MEDIUM6.526%ileNVD2026-10-30
CVE-2026-59993Picotls is a TLS protocol library that allows users select different crypto backends based on their use case. In affecteMEDIUM6.516%ileNVD2026-10-30
CVE-2026-107778MIT krb5 through 1.22.2 NULL Pointer Dereference via krb5_rd_cred()MEDIUM6.537%ileMicrosoft2026-10-13
CVE-2026-53111bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encapMEDIUM6.52%ileMicrosoft2026-06-09
CVE-2025-32912Libsoup: null pointer dereference in client when server omits the "nonce" parameter in an unauthorized response with diMEDIUM6.539%ileMicrosoft2025-04-08
CVE-2026-115921Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.4.0 until 1.22.0, MEDIUM6.23%ileNVD2026-10-26
CVE-2025-54409AIDE null pointer dereference when reading incorrectly encoded xattr attributes from database (local DoS)MEDIUM6.216%ileMicrosoft2025-08-12
CVE-2026-23679libusb < 1.0.30 NULL Pointer Dereference in parse_interface()MEDIUM6.28%ileMicrosoft2026-05-12
CVE-2026-120046Nezha 2.0.0 before 2.4.0 contains a NULL pointer dereference vulnerability in ServiceSentinel.loadTodayStats that allowsMEDIUM6.023%ileNVD2026-10-30
CVE-2026-118778Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, theMEDIUM5.910%ileNVD2026-10-29
CVE-2025-14180NULL Pointer Dereference in PDO quotingMEDIUM5.953%ileMicrosoft2025-12-09
CVE-2026-42767NULL Pointer Dereference in CRMF EncryptedValue DecryptionMEDIUM5.946%ileMicrosoft2026-06-09
CVE-2026-119728A flaw was found in the H.264 video parser in gst-plugins-bad. When processing a specially crafted H.264 video file withMEDIUM5.56%ileNVD2026-10-30
CVE-2026-110659ELFIO through 3.12 NULL Pointer Dereference via relocation_section_accessor get_entryMEDIUM5.57%ileMicrosoft2026-10-13
CVE-2026-98476s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str()MEDIUM5.57%ileMicrosoft2026-10-13
CVE-2026-113680HarfBuzz 8.0.0 through 14.6.0 WebAssembly Shaper NULL Pointer Dereference DoSMEDIUM5.56%ileMicrosoft2026-10-13
CVE-2025-40275ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_baddMEDIUM5.59%ileMicrosoft2025-12-09
CVE-2025-68345ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi()MEDIUM5.514%ileMicrosoft2025-12-09
CVE-2025-38513wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()MEDIUM5.56%ileMicrosoft2025-08-12
CVE-2025-38562ksmbd: fix null pointer dereference error in generate_encryptionkeyMEDIUM5.596%ileMicrosoft2025-08-12
CVE-2025-38610powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw()MEDIUM5.56%ileMicrosoft2025-08-12
CVE-2025-38664ice: Fix a null pointer dereference in ice_copy_and_init_pkg()MEDIUM5.58%ileMicrosoft2025-08-12
CVE-2026-89933iio: pressure: dps310: fix NULL pointer dereference on ACPI probeMEDIUM5.510%ileMicrosoft2026-09-08
CVE-2026-90019usb: gadget: fix null pointer dereference in usb_put_function_instance()MEDIUM5.512%ileMicrosoft2026-09-08
CVE-2026-90020USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl()MEDIUM5.511%ileMicrosoft2026-09-08
CVE-2026-90023usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers()MEDIUM5.514%ileMicrosoft2026-09-08
CVE-2026-93286net: appletalk: fix NULL pointer dereference in aarp_send_ddp()MEDIUM5.57%ileMicrosoft2026-09-08
CVE-2026-98008net: macb: fix NULL pointer dereference on unbind with fixed-linkMEDIUM5.57%ileMicrosoft2026-09-08
CVE-2026-98121watchdog: msc313e: Fix NULL pointer dereference in PM callbacksMEDIUM5.52%ileMicrosoft2026-09-08
CVE-2026-98129scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add()MEDIUM5.52%ileMicrosoft2026-09-08
CVE-2026-74734firewire: ohci: fix NULL pointer dereference in ar_context_releaseMEDIUM5.511%ileMicrosoft2026-08-11
CVE-2026-80679s390/dasd: Fix potential NULL pointer dereferenceMEDIUM5.57%ileMicrosoft2026-08-11
CVE-2026-46282iio: frequency: admv1013: fix NULL pointer dereference on strMEDIUM5.52%ileMicrosoft2026-06-09
CVE-2026-53166futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlockMEDIUM5.5—Microsoft2026-06-09
CVE-2026-53177bnxt_en: Fix NULL pointer dereferenceMEDIUM5.52%ileMicrosoft2026-06-09
CVE-2026-53237gpio: mvebu: fix NULL pointer dereference in suspend/resumeMEDIUM5.52%ileMicrosoft2026-06-09
CVE-2026-53289ice: fix NULL pointer dereference in ice_reset_all_vfs()MEDIUM5.52%ileMicrosoft2026-06-09
CVE-2026-53158misc: fastrpc: Fix NULL pointer dereference in rpmsg callbackMEDIUM5.52%ileMicrosoft2026-06-09
CVE-2026-53048gfs2: prevent NULL pointer dereference during unmountMEDIUM5.52%ileMicrosoft2026-06-09
CVE-2025-40107can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabledMEDIUM5.510%ileMicrosoft2025-11-11
CVE-2026-43131drm/amd/pm: Fix null pointer dereference issueMEDIUM5.51%ileMicrosoft2026-05-12
CVE-2026-43137ASoC: SOF: Intel: hda: Fix NULL pointer dereferenceMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-45845net/sched: taprio: fix NULL pointer dereference in class dumpMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-45846bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst()MEDIUM5.52%ileMicrosoft2026-05-12
CVE-2025-23146mfd: ene-kb3930: Fix a potential NULL pointer dereferenceMEDIUM5.512%ileMicrosoft2025-05-13
CVE-2025-37824tipc: fix NULL pointer dereference in tipc_mon_reinit_self()MEDIUM5.511%ileMicrosoft2025-05-13
CVE-2025-37844cifs: avoid NULL pointer dereference in dbg callMEDIUM5.523%ileMicrosoft2025-05-13
CVE-2025-37862HID: pidff: Fix null pointer dereference in pidff_find_fieldsMEDIUM5.524%ileMicrosoft2025-05-13
CVE-2025-37972Input: mtk-pmic-keys - fix possible null pointer dereferenceMEDIUM5.59%ileMicrosoft2025-05-13
CVE-2025-37855drm/amd/display: Guard Possible Null Pointer DereferenceMEDIUM5.515%ileMicrosoft2025-05-13
CVE-2026-53337net: bonding: fix NULL pointer dereference in bond_do_ioctl()MEDIUM5.52%ileMicrosoft2026-07-14
CVE-2026-53382media: vidtv: fix NULL pointer dereference in vidtv_mux_push_siMEDIUM5.53%ileMicrosoft2026-07-14
CVE-2026-64190net: team: fix NULL pointer dereference in team_xmit during mode changeMEDIUM5.52%ileMicrosoft2026-07-14
CVE-2026-64511ACPI: NFIT: core: Fix possible NULL pointer dereferenceMEDIUM5.55%ileMicrosoft2026-07-14
CVE-2025-21980sched: address a potential NULL pointer dereference in the GRED scheduler.MEDIUM5.59%ileMicrosoft2025-04-08
CVE-2025-22018atm: Fix NULL pointer dereferenceMEDIUM5.513%ileMicrosoft2025-04-08
CVE-2025-22070fs/9p: fix NULL pointer dereference on mkdirMEDIUM5.515%ileMicrosoft2025-04-08
CVE-2025-22103net: fix NULL pointer dereference in l3mdev_l3_rcvMEDIUM5.510%ileMicrosoft2025-04-08
CVE-2025-22037ksmbd: fix null pointer dereference in alloc_preauth_hash()MEDIUM5.599%ileMicrosoft2025-04-08
CVE-2024-38571thermal/drivers/tsens: Fix null pointer dereferenceMEDIUM5.514%ileMicrosoft2024-06-11
CVE-2026-75805NULL Pointer Dereference in CMP Client Revocation Response HandlingMEDIUM5.326%ileMicrosoft2026-09-08
CVE-2025-32909Libsoup: null pointer dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.cMEDIUM5.345%ileMicrosoft2025-04-08
CVE-2026-107888OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-held-on-crMEDIUM5.13%ileMicrosoft2026-10-13
CVE-2026-47143Capstone has a NULL Pointer Dereference with 3DNow! opcodesMEDIUM5.140%ileMicrosoft2026-07-14
CVE-2026-107708MIT krb5 through 1.22.2 KDC NULL Pointer Dereference via S4U2Proxy PACMEDIUM4.944%ileMicrosoft2026-10-13
CVE-2024-22653yasm commit 9defefae was discovered to contain a NULL pointer dereference via the yasm_section_bcs_append function at seMEDIUM4.819%ileMicrosoft2025-05-13
CVE-2026-98508drm/virtio: fix NULL pointer dereference on fence allocation failureMEDIUM4.710%ileMicrosoft2026-10-13
CVE-2025-40288drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devicesMEDIUM4.78%ileMicrosoft2025-12-09
CVE-2026-97975Bluetooth: hci_sysfs: Fix NULL pointer dereference in device_del()MEDIUM4.76%ileMicrosoft2026-09-08
CVE-2026-93261locking/lockdep: Fix NULL pointer dereference in __lock_set_class()MEDIUM4.79%ileMicrosoft2026-09-08
CVE-2026-68362wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_beginMEDIUM4.77%ileMicrosoft2026-08-11
CVE-2025-37918Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue()MEDIUM4.716%ileMicrosoft2025-05-13
CVE-2026-98747serial: core: fix NULL pointer dereference in serial_core_unregister_port()MEDIUM4.45%ileMicrosoft2026-10-13
CVE-2026-98931mtd: spinand: fix NULL pointer dereference with no ECC engineMEDIUM4.47%ileMicrosoft2026-10-13
CVE-2026-99087dm-integrity: fix NULL pointer dereference when the 'R' flag is usedMEDIUM4.45%ileMicrosoft2026-10-13
CVE-2026-98593s390/debug: Fix NULL pointer dereference in debug_info_copy()MEDIUM4.47%ileMicrosoft2026-10-13
CVE-2026-98764usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESCMEDIUM4.47%ileMicrosoft2026-10-13
CVE-2026-97446ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package()MEDIUM4.47%ileMicrosoft2026-09-08
CVE-2026-97519drm/xe: Fix null pointer dereference in devcoredump cleanupMEDIUM4.44%ileMicrosoft2026-09-08
CVE-2025-37758ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()MEDIUM4.410%ileMicrosoft2025-05-13
CVE-2026-105924A NULL pointer dereference vulnerability in the Qt QCborValue to JSON conversion of the Qt Core module.MEDIUM4.36%ileNVD2026-10-30
CVE-2026-101175Null pointer dereference vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may aMEDIUM4.3—NVD2026-11-02
CVE-2025-4476Libsoup: null pointer dereference in libsoup may lead to denial of serviceMEDIUM4.334%ileMicrosoft2025-05-13
CVE-2026-81005ipmi: si: Fix NULL pointer dereference after failed registrationMEDIUM4.27%ileMicrosoft2026-09-08
CVE-2026-98756usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probeMEDIUM4.17%ileMicrosoft2026-10-13
CVE-2026-80917PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systemsMEDIUM4.16%ileMicrosoft2026-09-08
CVE-2026-107655Cups: null pointer dereference via embedded job ticket comments allows remote denial of serviceMEDIUM4.016%ileMicrosoft2026-10-13
CVE-2026-107890OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation reLOW3.34%ileMicrosoft2026-10-13
CVE-2025-8835JasPer Image Color Space Conversion jas_image.c jas_image_chclrspc null pointer dereferenceLOW3.315%ileMicrosoft2025-08-12
CVE-2025-8844NASM Netwide Assember preproc.c parse_smacro_template null pointer dereferenceLOW3.322%ileMicrosoft2025-08-12
CVE-2026-91779GNU Binutils Eh Frame elf-eh-frame.c _bfd_elf_eh_frame_section_offset null pointer dereferenceLOW3.36%ileMicrosoft2026-09-08
CVE-2026-91780GNU Binutils elflink.c elf_link_add_object_symbols null pointer dereferenceLOW3.36%ileMicrosoft2026-09-08
CVE-2026-91781GNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_section_index null pointer dereferenceLOW3.37%ileMicrosoft2026-09-08
CVE-2026-86141xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., iLOW2.96%ileMicrosoft2026-09-08
CVE-2024-13978LibTIFF fax2ps tiff2pdf.c t2p_read_tiff_init null pointer dereferenceLOW2.514%ileMicrosoft2025-08-12
CVE-2025-8534libtiff tiff2ps tiff2ps.c PS_Lvl2page null pointer dereferenceLOW2.511%ileMicrosoft2025-08-12
CVE-2026-112566A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, UNKNOWN—14%ileNVD2026-10-26
CVE-2026-113906A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, UNKNOWN—5%ileNVD2026-10-26
CVE-2026-86964A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, maUNKNOWN—13%ileNVD2026-10-26
CVE-2026-99141In the Linux kernel, the following vulnerability has been resolved: tracing: Fix crash in print_graph_function_event() UNKNOWN—5%ileNVD2026-10-28
CVE-2026-99151In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL sink dereference in USB4 UNKNOWN—5%ileNVD2026-10-28
CVE-2026-99193In the Linux kernel, the following vulnerability has been resolved: net: ti: icssm-prueth: Move setting of netops to fiUNKNOWN—4%ileNVD2026-10-28
CVE-2026-99194In the Linux kernel, the following vulnerability has been resolved: net: ethernet: aeroflex: move setting of netops to UNKNOWN—4%ileNVD2026-10-28
CVE-2026-99195In the Linux kernel, the following vulnerability has been resolved: net: ethoc: move setting of netops to fix crash etUNKNOWN—4%ileNVD2026-10-28
CVE-2026-99196In the Linux kernel, the following vulnerability has been resolved: net: au1000: move setting of netops to fix crash aUNKNOWN—7%ileNVD2026-10-28
CVE-2026-99197In the Linux kernel, the following vulnerability has been resolved: net: mv643xx: move setting of netops to fix crash UNKNOWN—4%ileNVD2026-10-28
CVE-2026-99198In the Linux kernel, the following vulnerability has been resolved: net: ethernet: actions: Move setting of netops to fUNKNOWN—7%ileNVD2026-10-28
CVE-2026-99199In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: hip04_eth: Move setting of netops tUNKNOWN—4%ileNVD2026-10-28
CVE-2026-99200In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: hisi_femac: Move setting of netops UNKNOWN—4%ileNVD2026-10-28
CVE-2026-99209In the Linux kernel, the following vulnerability has been resolved: drm/xe: skip eviction of a BO with no resource xe_UNKNOWN—5%ileNVD2026-10-28
CVE-2026-62298mouse07410/asn1c is an ASN.1 compiler. Prior to 1.2.5, `OPEN TYPE` decoding can dereference an unallocated member pointeNONE0.043%ileNVD2026-10-30
CVE-2026-99220In the Linux kernel, the following vulnerability has been resolved: asymmetric_keys: reject trust keys without IDs TheUNKNOWN——NVD2026-11-02
CVE-2025-70102CVE-2025-70102: dhcpcd: NULL Pointer Dereference in Configuration Option ParsingUNKNOWN—7%ileOSS-Security2026-10-30
CVE-2026-98676iio: adc: ade9000: fix NULL pointer dereference in clkout registrationUNKNOWN—10%ileMicrosoft2026-10-13
CVE-2026-19024HDF5 H5Pget_fill_value NULL Pointer Dereference via Malformed Fill Value MessageUNKNOWN—8%ileMicrosoft2026-08-11
CVE-2026-7259Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()UNKNOWN—8%ileMicrosoft2026-05-12
CVE-2026-7262NULL pointer dereference in SOAP apache:Map decoder with missing <value>UNKNOWN—56%ileMicrosoft2026-05-12
CVE-2026-56288NULL Pointer Dereference in GNU patchUNKNOWN—2%ileMicrosoft2026-07-14
FG-IR-26-173Null Pointer Dereference in Log ReportUNKNOWN——Fortinet2026-09-08