libmobi before v0.10 contains a NULL pointer dereference via the component mobi_buffer_getpointer. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted mobi file.

CVE-2022-29795HIGHCVSS 7.5EG 7.5

2022-05-13

The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability.

CVE-2022-2980MEDIUMCVSS 5.5EG 5.5

2022-08-25

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259.

CVE-2022-30279HIGHCVSS 7.5EG 7.5

2022-05-12

An issue was discovered in Stormshield Network Security (SNS) 4.3.x before 4.3.8. The event logging of the ASQ sofbus lacbus plugin triggers the dereferencing of a NULL pointer, leading to a crash of SNS. An attacker could exploit this vul…

CVE-2022-30592CRITICALCVSS 9.8EG 9.8

2022-05-11

liblsquic/lsquic_qenc_hdl.c in LiteSpeed QUIC (aka LSQUIC) before 3.1.0 mishandles MAX_TABLE_CAPACITY.

CVE-2022-3078MEDIUMCVSS 5.5EG 5.5

2022-09-01

An issue was discovered in the Linux kernel through 5.16-rc6. There is a lack of check after calling vzalloc() and lack of free after allocation in drivers/media/test-drivers/vidtv/vidtv_s302m.c.

CVE-2022-30975MEDIUMCVSS 5.5EG 5.5

2022-05-18

In Artifex MuJS through 1.2.0, jsP_dumpsyntax in jsdump.c has a NULL pointer dereference, as demonstrated by mujs-pp.

CVE-2022-3104MEDIUMCVSS 5.5EG 5.5

2022-12-14

An issue was discovered in the Linux kernel through 5.16-rc6. lkdtm_ARRAY_BOUNDS in drivers/misc/lkdtm/bugs.c lacks check of the return value of kmalloc() and will cause the null pointer dereference.

CVE-2022-3105MEDIUMCVSS 5.5EG 5.5

2022-12-14

An issue was discovered in the Linux kernel through 5.16-rc6. uapi_finalize in drivers/infiniband/core/uverbs_uapi.c lacks check of kmalloc_array().

CVE-2022-3106MEDIUMCVSS 5.5EG 5.5

2022-12-14

An issue was discovered in the Linux kernel through 5.16-rc6. ef100_update_stats in drivers/net/ethernet/sfc/ef100_nic.c lacks check of the return value of kmalloc().

CVE-2022-3107MEDIUMCVSS 5.5EG 5.5

2022-12-14

An issue was discovered in the Linux kernel through 5.16-rc6. netvsc_get_ethtool_stats in drivers/net/hyperv/netvsc_drv.c lacks check of the return value of kvmalloc_array() and will cause the null pointer dereference.

CVE-2022-31076MEDIUMCVSS 4.2EG 4.2

2022-06-27

KubeEdge is built upon Kubernetes and extends native containerized application orchestration and device management to hosts at the Edge. In affected versions a malicious message can crash CloudCore by triggering a nil-pointer dereference i…

CVE-2022-31077MEDIUMCVSS 4.0EG 4.0

2022-06-27

KubeEdge is built upon Kubernetes and extends native containerized application orchestration and device management to hosts at the Edge. In affected versions a malicious message response from KubeEdge can crash the CSI Driver controller se…

CVE-2022-3109HIGHCVSS 7.5EG 7.5

2022-12-16

An issue was discovered in the FFmpeg package, where vp3_decode_frame in libavcodec/vp3.c lacks check of the return value of av_malloc() and will cause a null pointer dereference, impacting availability.

CVE-2022-3110MEDIUMCVSS 5.5EG 5.5

2022-12-14

An issue was discovered in the Linux kernel through 5.16-rc6. _rtw_init_xmit_priv in drivers/staging/r8188eu/core/rtw_xmit.c lacks check of the return value of rtw_alloc_hwxmits() and will cause the null pointer dereference.

CVE-2022-3111MEDIUMCVSS 5.5EG 5.5

2022-12-14

An issue was discovered in the Linux kernel through 5.16-rc6. free_charger_irq() in drivers/power/supply/wm8350_power.c lacks free of WM8350_IRQ_CHG_FAST_RDY, which is registered in wm8350_init_charger().

CVE-2022-3112MEDIUMCVSS 5.5EG 5.5

2022-12-14

An issue was discovered in the Linux kernel through 5.16-rc6. amvdec_set_canvases in drivers/staging/media/meson/vdec/vdec_helpers.c lacks check of the return value of kzalloc() and will cause the null pointer dereference.

CVE-2022-3113MEDIUMCVSS 5.5EG 5.5

2022-12-14

An issue was discovered in the Linux kernel through 5.16-rc6. mtk_vcodec_fw_vpu_init in drivers/media/platform/mtk-vcodec/mtk_vcodec_fw_vpu.c lacks check of the return value of devm_kzalloc() and will cause the null pointer dereference.

CVE-2022-3114MEDIUMCVSS 5.5EG 5.5

2022-12-14

An issue was discovered in the Linux kernel through 5.16-rc6. imx_register_uart_clocks in drivers/clk/imx/clk.c lacks check of the return value of kcalloc() and will cause the null pointer dereference.

CVE-2022-3115MEDIUMCVSS 5.5EG 5.5

2022-12-14

An issue was discovered in the Linux kernel through 5.16-rc6. malidp_crtc_reset in drivers/gpu/drm/arm/malidp_crtc.c lacks check of the return value of kzalloc() and will cause the null pointer dereference.

CVE-2022-3116HIGHCVSS 7.5EG 7.5

2023-03-27

The Heimdal Software Kerberos 5 implementation is vulnerable to a null pointer dereferance. An attacker with network access to an application that depends on the vulnerable code path can cause the application to crash.

CVE-2022-31213HIGHCVSS 7.5EG 7.5

2022-07-17

An issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found when supplying a malformed XML config file.

CVE-2022-3153MEDIUMCVSS 5.5EG 5.5

2022-09-08

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.

CVE-2022-31613HIGHCVSS 7.1EG 6.5

2022-11-19

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where any local user can cause a null-pointer dereference, which may lead to a kernel panic.

CVE-2022-31615MEDIUMCVSS 5.5EG 5.5

2022-11-19

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a local user with basic capabilities can cause a null-pointer dereference, which may lead to denial of service.

CVE-2022-31618MEDIUMCVSS 5.5EG 5.5

2022-08-05

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can dereference a null pointer, which may lead to denial of service.

CVE-2022-31681MEDIUMCVSS 6.5EG 6.5

2022-10-07

VMware ESXi contains a null-pointer deference vulnerability. A malicious actor with privileges within the VMX process only, may create a denial of service condition on the host.

CVE-2022-31763MEDIUMCVSS 5.5EG 5.5

2022-06-13

The kernel module has the null pointer and out-of-bounds array vulnerabilities. Successful exploitation of this vulnerability may affect system availability.

CVE-2022-3202HIGHCVSS 7.1EG 7.1

2022-09-14

A NULL pointer dereference flaw in diFree in fs/jfs/inode.c in Journaled File System (JFS)in the Linux kernel. This could allow a local attacker to crash the system or leak kernel internal information.

CVE-2022-32201MEDIUMCVSS 5.5EG 5.5

2022-06-02

In libjpeg 1.63, there is a NULL pointer dereference in Component::SubXOf in component.hpp.

CVE-2022-32202MEDIUMCVSS 5.5EG 5.5

2022-06-02

In libjpeg 1.63, there is a NULL pointer dereference in LineBuffer::FetchRegion in linebuffer.cpp.

CVE-2022-32230HIGHCVSS 7.5EG 7.5

2022-06-14

Microsoft Windows SMBv3 suffers from a null pointer dereference in versions of Windows prior to the April, 2022 patch set. By sending a malformed FileNormalizedNameInformation SMBv3 request over a named pipe, an attacker can cause a Blue S…

CVE-2022-32298HIGHCVSS 7.5EG 7.5

2022-07-14

Toybox v0.8.7 was discovered to contain a NULL pointer dereference via the component httpd.c. This vulnerability can lead to a Denial of Service (DoS) via unspecified vectors.

CVE-2022-32455HIGHCVSS 7.5EG 7.5

2022-08-04

In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when a BIG-IP LTM Client SSL profile is configured on a virtual server to perform client certificate authentication with s…

CVE-2022-32663HIGHCVSS 7.5EG 7.5

2023-02-06

In Wi-Fi driver, there is a possible system crash due to null pointer dereference. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN202…

CVE-2022-3278MEDIUMCVSS 5.5EG 5.5

2022-09-23

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0552.

CVE-2022-32785MEDIUMCVSS 5.5EG 5.5

2022-09-23

A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing an image may lead to a denial-of-s…

CVE-2022-33223HIGHCVSS 7.5EG 7.5

2023-04-13

Transient DOS in Modem due to null pointer dereference while processing the incoming packet with http chunked encoding.

CVE-2022-33290HIGHCVSS 7.5EG 7.5

2023-01-09

Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed.

CVE-2022-33294HIGHCVSS 7.5EG 7.5

2023-04-13

Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request message.

CVE-2022-33299HIGHCVSS 7.5EG 7.5

2023-01-09

Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data.

CVE-2022-33304HIGHCVSS 7.5EG 7.5

2023-05-02

Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet.

CVE-2022-33305HIGHCVSS 7.5EG 7.5

2023-05-02

Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH.

CVE-2022-3341MEDIUMCVSS 5.3EG 5.3

2023-01-12

A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avformat_new_stream() and triggers the null …

CVE-2022-3358HIGHCVSS 7.5EG 7.5

2022-10-11

OpenSSL supports creating a custom cipher via the legacy EVP_CIPHER_meth_new() function and associated function calls. This function was deprecated in OpenSSL 3.0 and application authors are instead encouraged to use the new provider mecha…

CVE-2022-34520MEDIUMCVSS 5.5EG 5.5

2022-07-22

Radare2 v5.7.2 was discovered to contain a NULL pointer dereference via the function r_bin_file_xtr_load_buffer at bin/bfile.c. This vulnerability allows attackers to cause a Denial of Service (DOS) via a crafted binary file.

CVE-2022-34556MEDIUMCVSS 5.5EG 5.5

2022-07-28

PicoC v3.2.2 was discovered to contain a NULL pointer dereference at variable.c.

CVE-2022-34651HIGHCVSS 7.5EG 7.5

2022-08-04

In BIG-IP Versions 16.1.x before 16.1.3.1 and 15.1.x before 15.1.6.1, when an LTM Client or Server SSL profile with TLS 1.3 enabled is configured on a virtual server, along with an iRule that calls HTTP::respond, undisclosed requests can c…

CVE-2022-34665MEDIUMCVSS 6.5EG 6.5

2022-11-19

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a local user with basic capabilities can cause a null-pointer dereference, which may lead to denial of service.

CVE-2022-34666MEDIUMCVSS 6.5EG 6.5

2022-11-10

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a local user with basic capabilities can cause a null-pointer dereference, which may lead to denial of service.

CWE-476— NULL Pointer Dereference

CVEs classified under CWE-476page 35 of 95

Map vulnerabilities like CWE-476 to your infrastructure