CWE-476 NULL Pointer Dereference
Description
The product dereferences a pointer that it expects to be valid but is NULL.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-476 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-74vm-87hj-r66f | CVE-2026-100349 | HIGH |
kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with content |
2026-10-16 | |
| GHSA-vrcc-3ch7-hppw | CVE-2026-100353 | HIGH |
kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filter |
2026-10-15 | |
| GHSA-mh7x-f8wq-4jhx | CVE-2026-100348 | MODERATE |
kin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS) |
2026-10-15 | |
| GHSA-qjpp-gffx-2wm9 | CVE-2026-100394 | MODERATE |
Nezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenant |
2026-10-15 | |
| GHSA-p6wj-qrr4-pgh5 | CVE-2026-97394 | HIGH |
kin-openapi: Nil-pointer dereference panic in openapi3filter for OpenAPI 3.1 array schemas missing items |
2026-10-15 | |
| GHSA-r7x5-4969-99p7 | CVE-2026-107213 | HIGH |
Excelize: Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element |
2026-10-08 | |
| GHSA-rxcj-4pj5-74gr | CVE-2026-107222 | MODERATE |
Excelize: GetConditionalFormats indexes conditional-formatting rule sub-elements with no length or nil check |
2026-10-07 | |
| GHSA-78mq-xcr3-xm33 | CVE-2026-39835 | MODERATE |
golang.org/x/crypto is vulnerable to invoking server panic during CheckHostKey/Authenticate flow |
2026-09-11 | |
| GHSA-mmfr-pmjx-hw9w | CVE-2026-76905 | HIGH |
kin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoS |
2026-08-21 | |
| GHSA-pr85-w493-9w3x | CVE-2026-55209 | CRITICAL |
resdata has Classic Buffer Overflow, Improper Validation of Array Index, NULL Pointer Dereference and Out-of-bounds Read |
2026-08-18 | |
| GHSA-jpcw-4wr7-c3vq | CVE-2026-73502 | MODERATE |
kin-openapi openapi3filter: unauthenticated nil-pointer panic when validating a request against a `content` parameter whose media type has no schema |
2026-08-12 | |
| GHSA-3x6r-wxxg-53vv | - | MODERATE |
rclone: Infinite Scale TUS Creation Transport Error Causes a Nil-Response Panic |
2026-08-05 | |
| GHSA-w4q6-qw23-4rg7 | CVE-2026-47427 | HIGH |
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler |
2026-07-28 | |
| GHSA-xx22-p4ch-683r | CVE-2026-59949 | MODERATE |
LZ4 Java: Native XXHash implementations can crash the JVM when passed invalid byte array ranges |
2026-07-24 | |
| GHSA-qh5g-q395-cx4j | - | LOW |
nuget/Magick.NET-Q16-AnyCPU
nuget/Magick.NET-Q16-HDRI-AnyCPU
nuget/Magick.NET-Q16-HDRI-OpenMP-arm64
nuget/Magick.NET-Q16-HDRI-arm64
nuget/Magick.NET-Q16-HDRI-x64
nuget/Magick.NET-Q16-HDRI-x86
nuget/Magick.NET-Q16-OpenMP-arm64
nuget/Magick.NET-Q16-OpenMP-x64
nuget/Magick.NET-Q16-arm64
nuget/Magick.NET-Q16-x64
nuget/Magick.NET-Q16-x86
nuget/Magick.NET-Q8-AnyCPU
nuget/Magick.NET-Q8-OpenMP-arm64
nuget/Magick.NET-Q8-OpenMP-x64
nuget/Magick.NET-Q8-arm64
nuget/Magick.NET-Q8-x64
nuget/Magick.NET-Q8-x86
|
ImageMagick: Heap-use-after-free via XMP profile could result in a crash |
2026-07-24 |
| GHSA-m932-crvm-gcp5 | CVE-2026-55984 | LOW |
Gitea: Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service |
2026-07-21 | |
| GHSA-m2v6-2jmh-4c68 | CVE-2026-53719 | MODERATE |
Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization |
2026-07-16 | |
| GHSA-hwpq-hmq9-wj77 | CVE-2026-44512 | MODERATE |
ONNX has Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs) |
2026-07-07 | |
| GHSA-55j6-rjhx-hwfh | CVE-2025-10999 | MODERATE |
Open Babel has NULL pointer dereference in CACAO CacaoFormat::SetHilderbrandt |
2026-07-01 | |
| GHSA-j9pp-7wfg-q7fj | CVE-2025-10998 | LOW |
Open Babel has NULL pointer dereference in ChemKinFormat::ReadReactionQualifierLines |
2026-07-01 | |
| GHSA-rxpr-wq63-jr7p | CVE-2026-3408 | LOW |
Open Babel has a NULL pointer dereference in CDXML OBAtom::GetExplicitValence |
2026-06-30 | |
| GHSA-4w5w-4fhm-q483 | CVE-2026-2705 | LOW |
Open Babel has NULL pointer dereference in MOL2 OBAtom::SetFormalCharge |
2026-06-30 | |
| GHSA-fhp4-pr5j-46m5 | - | HIGH |
Muhammara has a NULL pointer dereference in LZWDecode filter when DecodeParms omits EarlyChange key |
2026-06-26 | |
| GHSA-xhqx-mgh3-3h7q | CVE-2026-48756 | LOW |
Incus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at (sibling-field variant of GHSA-r7w7) |
2026-06-26 | |
| GHSA-4xg6-52mh-fpw8 | CVE-2026-48754 | LOW |
Incus: Nil-pointer dereference in createDependentVolumesFromBackup on disk.{Volume,VolumeSnapshots,Pool} |
2026-06-26 |