CWE-476
NULL Pointer Dereference
Description
The product dereferences a pointer that it expects to be valid but is NULL.
Hierarchy (View 1000)
CVEs mapped to this weakness (5,508)
page 263 of 276| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-2153 | Med | 0.00 | 5.5 | 0.00 | Aug 31, 2022 | A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs, causing a NULL pointer dereference. This flaw allows an unprivileged local attacker on the host to issue specific… | ||
| CVE-2022-1263 | Med | 0.00 | 5.5 | 0.00 | Aug 31, 2022 | A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service. | ||
| CVE-2022-1205 | Med | 0.00 | 4.7 | 0.00 | Aug 31, 2022 | A NULL pointer dereference flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This flaw allows a local user to crash the system. | ||
| CVE-2020-35538 | Med | 0.00 | 5.5 | 0.00 | Aug 31, 2022 | A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo. | ||
| CVE-2022-1199 | Hig | 0.00 | 7.5 | 0.02 | Aug 29, 2022 | A flaw was found in the Linux kernel. This flaw allows an attacker to crash the Linux kernel by simulating amateur radio from the user space, resulting in a null-ptr-deref vulnerability and a use-after-free vulnerability. | ||
| CVE-2022-0168 | Med | 0.00 | 4.4 | 0.00 | Aug 26, 2022 | A denial of service (DOS) issue was found in the Linux kernel’s smb2_ioctl_query_info function in the fs/cifs/smb2ops.c Common Internet File System (CIFS) due to an incorrect return from the memdup_user function. This flaw allows a local, privileged (CAP_SYS_ADMIN) attacker to… | ||
| CVE-2022-2980 | Med | 0.00 | 5.5 | 0.01 | Aug 25, 2022 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259. | ||
| CVE-2021-4209 | Med | 0.00 | 6.5 | 0.01 | Aug 24, 2022 | A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare circumstances. | ||
| CVE-2021-4158 | Med | 0.00 | 6.0 | 0.00 | Aug 24, 2022 | A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user within the guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition. | ||
| CVE-2022-2923 | Med | 0.00 | 5.5 | 0.00 | Aug 22, 2022 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240. | ||
| CVE-2021-3659 | Med | 0.00 | 5.5 | 0.00 | Aug 22, 2022 | A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection. This flaw allows a local user to crash the system. The highest threat from this vulnerability is to system… | ||
| CVE-2022-2874 | Med | 0.00 | 5.5 | 0.00 | Aug 18, 2022 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224. | ||
| CVE-2022-2549 | Med | 0.00 | 5.5 | 0.01 | Jul 27, 2022 | NULL Pointer Dereference in GitHub repository gpac/gpac prior to v2.1.0-DEV. | ||
| CVE-2022-1671 | Hig | 0.00 | 7.1 | 0.00 | Jul 26, 2022 | A NULL pointer dereference flaw was found in rxrpc_preparse_s in net/rxrpc/server_key.c in the Linux kernel. This flaw allows a local attacker to crash the system or leak internal kernel information. | ||
| CVE-2020-36558 | Med | 0.00 | 5.1 | 0.00 | Jul 21, 2022 | A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and general protection fault. | ||
| CVE-2022-2279 | Med | 0.00 | 5.5 | 0.01 | Jul 1, 2022 | NULL Pointer Dereference in GitHub repository bfabiszewski/libmobi prior to 0.11. | ||
| CVE-2022-1852 | Med | 0.00 | 5.5 | 0.00 | Jun 30, 2022 | A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in the x86_emulate_insn in arch/x86/kvm/emulate.c. This flaw occurs while executing an illegal instruction in guest in the Intel CPU. | ||
| CVE-2022-2231 | Med | 0.00 | 5.5 | 0.01 | Jun 28, 2022 | NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2. | ||
| CVE-2021-41689 | Hig | 0.00 | 7.5 | 0.02 | Jun 28, 2022 | DCMTK through 3.6.6 does not handle string copy properly. Sending specific requests to the dcmqrdb program, it would query its database and copy the result even if the result is null, which can incur a head-based overflow. An attacker can use it to launch a DoS attack. | ||
| CVE-2022-2208 | Med | 0.00 | 5.5 | 0.01 | Jun 27, 2022 | NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163. |
- risk 0.00cvss 5.5epss 0.00
A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs, causing a NULL pointer dereference. This flaw allows an unprivileged local attacker on the host to issue specific…
- risk 0.00cvss 5.5epss 0.00
A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service.
- risk 0.00cvss 4.7epss 0.00
A NULL pointer dereference flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This flaw allows a local user to crash the system.
- risk 0.00cvss 5.5epss 0.00
A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo.
- risk 0.00cvss 7.5epss 0.02
A flaw was found in the Linux kernel. This flaw allows an attacker to crash the Linux kernel by simulating amateur radio from the user space, resulting in a null-ptr-deref vulnerability and a use-after-free vulnerability.
- risk 0.00cvss 4.4epss 0.00
A denial of service (DOS) issue was found in the Linux kernel’s smb2_ioctl_query_info function in the fs/cifs/smb2ops.c Common Internet File System (CIFS) due to an incorrect return from the memdup_user function. This flaw allows a local, privileged (CAP_SYS_ADMIN) attacker to…
- risk 0.00cvss 5.5epss 0.01
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259.
- risk 0.00cvss 6.5epss 0.01
A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare circumstances.
- risk 0.00cvss 6.0epss 0.00
A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user within the guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition.
- risk 0.00cvss 5.5epss 0.00
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240.
- risk 0.00cvss 5.5epss 0.00
A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection. This flaw allows a local user to crash the system. The highest threat from this vulnerability is to system…
- risk 0.00cvss 5.5epss 0.00
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224.
- risk 0.00cvss 5.5epss 0.01
NULL Pointer Dereference in GitHub repository gpac/gpac prior to v2.1.0-DEV.
- risk 0.00cvss 7.1epss 0.00
A NULL pointer dereference flaw was found in rxrpc_preparse_s in net/rxrpc/server_key.c in the Linux kernel. This flaw allows a local attacker to crash the system or leak internal kernel information.
- risk 0.00cvss 5.1epss 0.00
A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and general protection fault.
- risk 0.00cvss 5.5epss 0.01
NULL Pointer Dereference in GitHub repository bfabiszewski/libmobi prior to 0.11.
- risk 0.00cvss 5.5epss 0.00
A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in the x86_emulate_insn in arch/x86/kvm/emulate.c. This flaw occurs while executing an illegal instruction in guest in the Intel CPU.
- risk 0.00cvss 5.5epss 0.01
NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.
- risk 0.00cvss 7.5epss 0.02
DCMTK through 3.6.6 does not handle string copy properly. Sending specific requests to the dcmqrdb program, it would query its database and copy the result even if the result is null, which can incur a head-based overflow. An attacker can use it to launch a DoS attack.
- risk 0.00cvss 5.5epss 0.01
NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163.