Vulnerabilities (CVE)

Filtered by CWE-476
Total 3902 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-50635 1 Netis-systems 2 Wf2780, Wf2780 Firmware 2025-08-15 N/A 7.5 HIGH
A null pointer dereference vulnerability was discovered in Netis WF2780 v2.2.35445. The vulnerability exists in the FUN_0048a728 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the CONTENT_LENGTH variable, causing the program to crash and potentially leading to a denial-of-service (DoS) attack.
CVE-2025-50952 1 Uclouvain 1 Openjpeg 2025-08-14 N/A 6.5 MEDIUM
openjpeg v 2.5.0 was discovered to contain a NULL pointer dereference via the component /openjp2/dwt.c.
CVE-2025-49567 3 Adobe, Apple, Microsoft 3 Illustrator, Macos, Windows 2025-08-14 N/A 5.5 MEDIUM
Illustrator versions 28.7.8, 29.6.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing a disruption in service. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2025-8114 1 Libssh 1 Libssh 2025-08-14 N/A 4.7 MEDIUM
A flaw was found in libssh, a library that implements the SSH protocol. When calculating the session ID during the key exchange (KEX) process, an allocation failure in cryptographic functions may lead to a NULL pointer dereference. This issue can cause the client or server to crash.
CVE-2018-13440 2 Audiofile, Canonical 2 Audiofile, Ubuntu Linux 2025-08-13 4.3 MEDIUM 6.5 MEDIUM
The audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup in modules/ModuleState.cpp, which allows an attacker to cause a denial of service via a crafted caf file, as demonstrated by sfconvert.
CVE-2019-13147 2 Audiofile, Debian 2 Audiofile, Debian Linux 2025-08-13 4.3 MEDIUM 6.5 MEDIUM
In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file.
CVE-2025-48073 1 Openexr 1 Openexr 2025-08-13 N/A 6.2 MEDIUM
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In version 3.3.2, when reading a deep scanline image with a large sample count in reduceMemory mode, it is possible to crash a target application with a NULL pointer dereference in a write operation. This is fixed in version 3.3.3.
CVE-2025-24515 2025-08-13 N/A 6.5 MEDIUM
NULL pointer dereference for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access.
CVE-2025-52585 2025-08-13 N/A 7.5 HIGH
When a BIG-IP LTM Client SSL profile is configured on a virtual server with SSL Forward Proxy enabled and Anonymous Diffie-Hellman (ADH) ciphers enabled, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2023-27336 1 Softing 3 Edgeaggregator, Edgeconnector, Secure Integration Server 2025-08-13 N/A 7.5 HIGH
Softing edgeConnector Siemens OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Softing edgeConnector Siemens. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of OPC client certificates. The issue results from dereferencing a NULL pointer. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-20508.
CVE-2025-47807 1 Gstreamer Project 1 Gstreamer 2025-08-12 N/A 5.5 MEDIUM
In GStreamer through 1.26.1, the subparse plugin's subrip_unescape_formatting function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.
CVE-2025-47808 1 Gstreamer Project 1 Gstreamer 2025-08-12 N/A 5.6 MEDIUM
In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.
CVE-2025-26690 1 Openatom 1 Openharmony 2025-08-12 N/A 3.3 LOW
in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.
CVE-2025-8183 1 D3tn 1 Ud3tn 2025-08-11 N/A 7.5 HIGH
NULL Pointer Dereference in µD3TN via non-singleton destination Endpoint Identifier allows remote attacker to reliably cause DoS
CVE-2025-8865 2025-08-11 N/A N/A
The YugabyteDB tablet server contains a flaw in its YCQL query handling that can trigger a null pointer dereference when processing certain malformed inputs. An authenticated attacker could exploit this issue to crash the YCQL tablet server, resulting in a denial of service.
CVE-2023-43522 1 Qualcomm 572 Aqt1000, Aqt1000 Firmware, Ar8035 and 569 more 2025-08-11 N/A 7.5 HIGH
Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.
CVE-2023-33088 1 Qualcomm 612 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 609 more 2025-08-11 N/A 8.4 HIGH
Memory corruption when processing cmd parameters while parsing vdev.
CVE-2023-33089 1 Qualcomm 456 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 453 more 2025-08-11 N/A 7.5 HIGH
Transient DOS when processing a NULL buffer while parsing WLAN vdev.
CVE-2024-53024 1 Qualcomm 332 Ar8035, Ar8035 Firmware, Csra6620 and 329 more 2025-08-11 N/A 7.8 HIGH
Memory corruption in display driver while detaching a device.
CVE-2023-24847 1 Qualcomm 514 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 511 more 2025-08-11 N/A 7.5 HIGH
Transient DOS in Modem while allocating DSM items.