Vulnerabilities > NULL Pointer Dereference

DATE CVE VULNERABILITY TITLE RISK
2023-02-12 CVE-2022-44447 NULL Pointer Dereference vulnerability in Google Android 10.0/11.0/12.0
In wlan driver, there is a possible null pointer dereference issue due to a missing bounds check.
local
low complexity
google CWE-476
5.5
2023-02-08 CVE-2023-0216 NULL Pointer Dereference vulnerability in multiple products
An invalid pointer dereference on read can be triggered when an application tries to load malformed PKCS7 data with the d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions. The result of the dereference is an application crash which could lead to a denial of service attack.
network
low complexity
openssl stormshield CWE-476
7.5
2023-02-08 CVE-2023-0217 NULL Pointer Dereference vulnerability in Openssl
An invalid pointer dereference on read can be triggered when an application tries to check a malformed DSA public key by the EVP_PKEY_public_check() function.
network
low complexity
openssl CWE-476
7.5
2023-02-08 CVE-2023-0401 NULL Pointer Dereference vulnerability in multiple products
A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data.
network
low complexity
openssl stormshield CWE-476
7.5
2023-02-06 CVE-2022-32663 NULL Pointer Dereference vulnerability in Mediatek products
In Wi-Fi driver, there is a possible system crash due to null pointer dereference.
network
low complexity
mediatek CWE-476
7.5
2023-02-03 CVE-2023-23087 NULL Pointer Dereference vulnerability in Mojojson Project Mojojson 1.2.3
An issue was found in MojoJson v1.2.3 allows attackers to execute arbitary code via the destroy function.
network
low complexity
mojojson-project CWE-476
critical
9.8
2023-02-01 CVE-2023-22340 NULL Pointer Dereference vulnerability in F5 products
On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a SIP profile is configured on a Message Routing type virtual server, undisclosed traffic can cause TMM to terminate.
network
low complexity
f5 CWE-476
7.5
2023-02-01 CVE-2023-22341 NULL Pointer Dereference vulnerability in F5 Big-Ip Access Policy Manager
On version 14.1.x before 14.1.5.3, and all versions of 13.1.x, when the BIG-IP APM system is configured with all the following elements, undisclosed requests may cause the Traffic Management Microkernel (TMM) to terminate: * An OAuth Server that references an OAuth Provider * An OAuth profile with the Authorization Endpoint set to '/' * An access profile that references the above OAuth profile and is associated with an HTTPS virtual server Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
network
low complexity
f5 CWE-476
7.5
2023-02-01 CVE-2023-22839 NULL Pointer Dereference vulnerability in F5 products
On BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all version of 13.1.x, when a DNS profile with the Rapid Response Mode setting enabled is configured on a virtual server with hardware SYN cookies enabled, undisclosed requests cause the Traffic Management Microkernel (TMM) to terminate.
network
low complexity
f5 CWE-476
7.5
2023-01-26 CVE-2022-44018 NULL Pointer Dereference vulnerability in Softing Uatoolkit Embedded 1.31/1.40
In Softing uaToolkit Embedded before 1.40.1, a malformed PubSub discovery announcement message can cause a NULL pointer dereference or out-of-bounds memory access in the subscriber application.
network
low complexity
softing CWE-476
7.5