Vulnerabilities (CVE)

Filtered by CWE-476
Total 5887 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-65411 1 Unrtf Project 1 Unrtf 2026-06-17 N/A 7.5 HIGH
A NULL pointer dereference in the src/path.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Service (DoS) via injecting a crafted payload into the search_path parameter.
CVE-2025-65408 1 Live555 1 Streaming Media 2026-06-17 N/A 6.5 MEDIUM
A NULL pointer dereference in the ADTSAudioFileServerMediaSubsession::createNewRTPSink() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via supplying a crafted ADTS file.
CVE-2025-64086 1 Pdf-xchange 1 Pdf-xchange Editor 2026-06-17 N/A 7.5 HIGH
A NULL pointer dereference vulnerability in the util.readFileIntoStream component of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2025-64085 1 Pdf-xchange 1 Pdf-xchange Editor 2026-06-17 N/A 7.5 HIGH
A NULL pointer dereference vulnerability in the importDataObject() function of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2025-63929 1 Airpig2011 1 Iec104 2026-06-17 N/A 7.5 HIGH
A null pointer dereference vulnerability exists in airpig2011 IEC104 thru Commit be6d841 (2019-07-08). When multiple threads enqueue elements concurrently via IEC10X_PrioEnQueue, the function may dereference a null or freed queue pointer, resulting in a segmentation fault and potential denial-of-service.
CVE-2025-63745 1 Radare 1 Radare2 2026-06-17 N/A 5.5 MEDIUM
A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the info() function of bin_ne.c. A crafted binary input can trigger a segmentation fault, leading to a denial of service when the tool processes malformed data.
CVE-2025-63744 1 Radare 1 Radare2 2026-06-17 N/A 4.3 MEDIUM
A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the load() function of bin_dyldcache.c. Processing a crafted file can cause a segmentation fault and crash the program.
CVE-2025-63655 1 Monkey-project 1 Monkey 2026-06-17 N/A 7.5 HIGH
A NULL pointer dereference in the mk_http_range_parse function (mk_server/mk_http.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.
CVE-2025-63648 1 Owntone 1 Owntone Server 2026-06-17 N/A 7.5 HIGH
A NULL pointer dereference in the dacp_reply_playqueueedit_move function (src/httpd_dacp.c) of owntone-server commit b7e385f allows attackers to cause a Denial of Service (DoS) via sending a crafted DACP request to the server.
CVE-2025-63647 1 Owntone 1 Owntone Server 2026-06-17 N/A 7.5 HIGH
A NULL pointer dereference in the parse_meta function (src/httpd_daap.c) of owntone-server commit 334beb allows attackers to cause a Denial of Service (DoS) via sending a crafted DAAP request to the server.
CVE-2025-62815 1 Samsung 10 Exynos 1380, Exynos 1380 Firmware, Exynos 1480 and 7 more 2026-06-17 N/A 5.5 MEDIUM
An issue was discovered in Samsung Mobile Processor Exynos 1380, 1480, 2400, 1580, and 2500. A NULL pointer dereference of npu_proto_drv.ast.thread_ref in set_cpu_affinity() causes a denial of service.
CVE-2025-62814 1 Samsung 10 Exynos 1280, Exynos 1280 Firmware, Exynos 1380 and 7 more 2026-06-17 N/A 7.5 HIGH
An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, and 2400. A NULL pointer dereference of ft_handle in load_fw_utc_vector() causes a denial of service.
CVE-2025-62465 1 Microsoft 6 Windows 11 23h2, Windows 11 24h2, Windows 11 25h2 and 3 more 2026-06-17 N/A 6.5 MEDIUM
Null pointer dereference in Windows DirectX allows an authorized attacker to deny service locally.
CVE-2025-61143 1 Libtiff 1 Libtiff 2026-06-17 N/A 5.5 MEDIUM
libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.
CVE-2025-61107 1 Frrouting 1 Frrouting 2026-06-17 N/A 7.5 HIGH
FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_pref_pref_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted LSA Update packet.
CVE-2025-61106 1 Frrouting 1 Frrouting 2026-06-17 N/A 7.5 HIGH
FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_pref_pref_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet.
CVE-2025-61105 1 Frrouting 1 Frrouting 2026-06-17 N/A 7.5 HIGH
FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_link_info function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet.
CVE-2025-61104 1 Frrouting 1 Frrouting 2026-06-17 N/A 7.5 HIGH
FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_unknown_tlv function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet.
CVE-2025-61103 1 Frrouting 1 Frrouting 2026-06-17 N/A 7.5 HIGH
FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_lan_adj_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet.
CVE-2025-61102 1 Frrouting 1 Frrouting 2026-06-17 N/A 7.5 HIGH
FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_adj_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet.