Common Weakness Enumeration

CWE-476 NULL Pointer Dereference

Description

The product dereferences a pointer that it expects to be valid but is NULL.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-476 ordered by modification date.

25 reviewed records
Advisory ID NVD ID Severity PURLs Summary Last Modified
GHSA-74vm-87hj-r66f CVE-2026-100349 HIGH

kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with content

2026-10-16
GHSA-vrcc-3ch7-hppw CVE-2026-100353 HIGH

kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filter

2026-10-15
GHSA-mh7x-f8wq-4jhx CVE-2026-100348 MODERATE

kin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS)

2026-10-15
GHSA-qjpp-gffx-2wm9 CVE-2026-100394 MODERATE

Nezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenant

2026-10-15
GHSA-p6wj-qrr4-pgh5 CVE-2026-97394 HIGH

kin-openapi: Nil-pointer dereference panic in openapi3filter for OpenAPI 3.1 array schemas missing items

2026-10-15
GHSA-r7x5-4969-99p7 CVE-2026-107213 HIGH

Excelize: Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element

2026-10-08
GHSA-rxcj-4pj5-74gr CVE-2026-107222 MODERATE

Excelize: GetConditionalFormats indexes conditional-formatting rule sub-elements with no length or nil check

2026-10-07
GHSA-78mq-xcr3-xm33 CVE-2026-39835 MODERATE

golang.org/x/crypto is vulnerable to invoking server panic during CheckHostKey/Authenticate flow

2026-09-11
GHSA-mmfr-pmjx-hw9w CVE-2026-76905 HIGH

kin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoS

2026-08-21
GHSA-pr85-w493-9w3x CVE-2026-55209 CRITICAL

resdata has Classic Buffer Overflow, Improper Validation of Array Index, NULL Pointer Dereference and Out-of-bounds Read

2026-08-18
GHSA-jpcw-4wr7-c3vq CVE-2026-73502 MODERATE

kin-openapi openapi3filter: unauthenticated nil-pointer panic when validating a request against a `content` parameter whose media type has no schema

2026-08-12
GHSA-3x6r-wxxg-53vv - MODERATE

rclone: Infinite Scale TUS Creation Transport Error Causes a Nil-Response Panic

2026-08-05
GHSA-w4q6-qw23-4rg7 CVE-2026-47427 HIGH

GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler

2026-07-28
GHSA-xx22-p4ch-683r CVE-2026-59949 MODERATE

LZ4 Java: Native XXHash implementations can crash the JVM when passed invalid byte array ranges

2026-07-24
GHSA-qh5g-q395-cx4j - LOW

ImageMagick: Heap-use-after-free via XMP profile could result in a crash

2026-07-24
GHSA-m932-crvm-gcp5 CVE-2026-55984 LOW

Gitea: Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service

2026-07-21
GHSA-m2v6-2jmh-4c68 CVE-2026-53719 MODERATE

Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization

2026-07-16
GHSA-hwpq-hmq9-wj77 CVE-2026-44512 MODERATE

ONNX has Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs)

2026-07-07
GHSA-55j6-rjhx-hwfh CVE-2025-10999 MODERATE

Open Babel has NULL pointer dereference in CACAO CacaoFormat::SetHilderbrandt

2026-07-01
GHSA-j9pp-7wfg-q7fj CVE-2025-10998 LOW

Open Babel has NULL pointer dereference in ChemKinFormat::ReadReactionQualifierLines

2026-07-01
GHSA-rxpr-wq63-jr7p CVE-2026-3408 LOW

Open Babel has a NULL pointer dereference in CDXML OBAtom::GetExplicitValence

2026-06-30
GHSA-4w5w-4fhm-q483 CVE-2026-2705 LOW

Open Babel has NULL pointer dereference in MOL2 OBAtom::SetFormalCharge

2026-06-30
GHSA-fhp4-pr5j-46m5 - HIGH

Muhammara has a NULL pointer dereference in LZWDecode filter when DecodeParms omits EarlyChange key

2026-06-26
GHSA-xhqx-mgh3-3h7q CVE-2026-48756 LOW

Incus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at (sibling-field variant of GHSA-r7w7)

2026-06-26
GHSA-4xg6-52mh-fpw8 CVE-2026-48754 LOW

Incus: Nil-pointer dereference in createDependentVolumesFromBackup on disk.{Volume,VolumeSnapshots,Pool}

2026-06-26