CWE-476
NULL Pointer Dereference
Description
The product dereferences a pointer that it expects to be valid but is NULL.
Hierarchy (View 1000)
CVEs mapped to this weakness (5,667)
page 48 of 284| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-23022 | Hig | 0.49 | 7.5 | 0.01 | Jan 25, 2022 | On BIG-IP version 16.1.x before 16.1.2, when an HTTP profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. | ||
| CVE-2022-23021 | Hig | 0.49 | 7.5 | 0.01 | Jan 25, 2022 | On BIG-IP version 16.1.x before 16.1.2, when any of the following configurations are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate: HTTP redirect rule in an LTM policy, BIG-IP APM Access Profile, and Explicit… | ||
| CVE-2022-23020 | Hig | 0.49 | 7.5 | 0.01 | Jan 25, 2022 | On BIG-IP version 16.1.x before 16.1.2, when the 'Respond on Error' setting is enabled on the Request Logging profile and configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have… | ||
| CVE-2022-23017 | Hig | 0.49 | 7.5 | 0.01 | Jan 25, 2022 | On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x, when a virtual server is configured with a DNS profile with the Rapid Response Mode setting enabled and is configured on a BIG-IP system, undisclosed requests can… | ||
| CVE-2022-23016 | Hig | 0.49 | 7.5 | 0.01 | Jan 25, 2022 | On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP SSL Forward Proxy with TLS 1.3 is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of… | ||
| CVE-2021-38786 | Hig | 0.49 | 7.5 | 0.02 | Jan 19, 2022 | There is a NULL pointer dereference in media/libcedarc/vdecoder of Allwinner R818 SoC Android Q SDK V1.0, which could cause a media crash (denial of service). | ||
| CVE-2021-38785 | Hig | 0.49 | 7.5 | 0.02 | Jan 18, 2022 | There is a NULL pointer deference in the Allwinner R818 SoC Android Q SDK V1.0 camera driver /dev/cedar_dev that could use the ioctl cmd IOCTL_GET_IOMMU_ADDR to cause a system crash. | ||
| CVE-2021-38784 | Hig | 0.49 | 7.5 | 0.02 | Jan 18, 2022 | There is a NULL pointer dereference in the syscall open_exec function of Allwinner R818 SoC Android Q SDK V1.0 that could executable a malicious file to cause a system crash. | ||
| CVE-2022-23094 | Hig | 0.49 | 7.5 | 0.03 | Jan 15, 2022 | Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted IKEv1 packet because pluto/ikev1.c wrongly expects that a state object exists. This is fixed in 4.6. | ||
| CVE-2021-45773 | Hig | 0.49 | 7.5 | 0.01 | Jan 14, 2022 | A NULL pointer dereference in CS104_IPAddress_setFromString at src/iec60870/cs104/cs104_slave.c of lib60870 commit 0d5e76e can lead to a segmentation fault or application crash. | ||
| CVE-2021-45769 | Hig | 0.49 | 7.5 | 0.01 | Jan 14, 2022 | A NULL pointer dereference in AcseConnection_parseMessage at src/mms/iso_acse/acse.c of libiec61850 v1.5.0 can lead to a segmentation fault or application crash. | ||
| CVE-2021-45761 | Hig | 0.49 | 7.5 | 0.01 | Jan 14, 2022 | ROPium v3.1 was discovered to contain an invalid memory address dereference via the find() function. | ||
| CVE-2021-30330 | Hig | 0.49 | 7.5 | 0.01 | Jan 13, 2022 | Possible null pointer dereference due to improper validation of APE clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables | ||
| CVE-2021-40039 | Hig | 0.49 | 7.5 | 0.01 | Jan 10, 2022 | There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affect service integrity. | ||
| CVE-2021-40031 | Hig | 0.49 | 7.5 | 0.01 | Jan 10, 2022 | There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affect service integrity. | ||
| CVE-2021-40027 | Hig | 0.49 | 7.5 | 0.01 | Jan 10, 2022 | The bone voice ID TA has a vulnerability in calculating the buffer length,Successful exploitation of this vulnerability may affect data confidentiality. | ||
| CVE-2021-40018 | Hig | 0.49 | 7.5 | 0.01 | Jan 10, 2022 | The eID module has a null pointer reference vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. | ||
| CVE-2021-39988 | Hig | 0.49 | 7.5 | 0.01 | Jan 3, 2022 | The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may cause a process to restart. | ||
| CVE-2021-39977 | Hig | 0.49 | 7.5 | 0.01 | Jan 3, 2022 | The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may cause a process to restart. | ||
| CVE-2021-39973 | Hig | 0.49 | 7.5 | 0.01 | Jan 3, 2022 | There is a Null pointer dereference in Smartphones.Successful exploitation of this vulnerability may cause the kernel to break down. |
- risk 0.49cvss 7.5epss 0.01
On BIG-IP version 16.1.x before 16.1.2, when an HTTP profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
- risk 0.49cvss 7.5epss 0.01
On BIG-IP version 16.1.x before 16.1.2, when any of the following configurations are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate: HTTP redirect rule in an LTM policy, BIG-IP APM Access Profile, and Explicit…
- risk 0.49cvss 7.5epss 0.01
On BIG-IP version 16.1.x before 16.1.2, when the 'Respond on Error' setting is enabled on the Request Logging profile and configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have…
- risk 0.49cvss 7.5epss 0.01
On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x, when a virtual server is configured with a DNS profile with the Rapid Response Mode setting enabled and is configured on a BIG-IP system, undisclosed requests can…
- risk 0.49cvss 7.5epss 0.01
On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP SSL Forward Proxy with TLS 1.3 is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of…
- risk 0.49cvss 7.5epss 0.02
There is a NULL pointer dereference in media/libcedarc/vdecoder of Allwinner R818 SoC Android Q SDK V1.0, which could cause a media crash (denial of service).
- risk 0.49cvss 7.5epss 0.02
There is a NULL pointer deference in the Allwinner R818 SoC Android Q SDK V1.0 camera driver /dev/cedar_dev that could use the ioctl cmd IOCTL_GET_IOMMU_ADDR to cause a system crash.
- risk 0.49cvss 7.5epss 0.02
There is a NULL pointer dereference in the syscall open_exec function of Allwinner R818 SoC Android Q SDK V1.0 that could executable a malicious file to cause a system crash.
- risk 0.49cvss 7.5epss 0.03
Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted IKEv1 packet because pluto/ikev1.c wrongly expects that a state object exists. This is fixed in 4.6.
- risk 0.49cvss 7.5epss 0.01
A NULL pointer dereference in CS104_IPAddress_setFromString at src/iec60870/cs104/cs104_slave.c of lib60870 commit 0d5e76e can lead to a segmentation fault or application crash.
- risk 0.49cvss 7.5epss 0.01
A NULL pointer dereference in AcseConnection_parseMessage at src/mms/iso_acse/acse.c of libiec61850 v1.5.0 can lead to a segmentation fault or application crash.
- risk 0.49cvss 7.5epss 0.01
ROPium v3.1 was discovered to contain an invalid memory address dereference via the find() function.
- risk 0.49cvss 7.5epss 0.01
Possible null pointer dereference due to improper validation of APE clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables
- risk 0.49cvss 7.5epss 0.01
There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affect service integrity.
- risk 0.49cvss 7.5epss 0.01
There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affect service integrity.
- risk 0.49cvss 7.5epss 0.01
The bone voice ID TA has a vulnerability in calculating the buffer length,Successful exploitation of this vulnerability may affect data confidentiality.
- risk 0.49cvss 7.5epss 0.01
The eID module has a null pointer reference vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
- risk 0.49cvss 7.5epss 0.01
The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may cause a process to restart.
- risk 0.49cvss 7.5epss 0.01
The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may cause a process to restart.
- risk 0.49cvss 7.5epss 0.01
There is a Null pointer dereference in Smartphones.Successful exploitation of this vulnerability may cause the kernel to break down.