Skip to content

CWE-395 · weakness in Input Validation and Logic

Use of NullPointerException Catch to Detect NULL Pointer Dereference

17 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 17 is a mark on the map. Named now: 1 to 17, most at risk first.

  1. A flaw was found in Blender 3.3.0. A null pointer dereference exists in source/blender/gpu/opengl/gl_backend.cc that may lead to loss of confidentiality and integrity.CVE-2022-2832Blender · 1.8% likely

    Blender

  2. Ollama Multi-Modal Model Image Processing NULL Pointer DereferenceCVE-2025-15514Ollama · CVSS 7.5 · 0.8% likely

    Ollama

  3. D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_42AF30(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a craft…CVE-2024-27659Dlink · CVSS 6.5 · 0.6% likely

    D-Link

  4. D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_4484A8(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a craft…CVE-2024-27658Dlink · CVSS 6.5 · 0.6% likely

    D-Link

  5. Mutiple vulnerabilities in the Viridian interfaceCVE-2025-58142Xen · CVSS 9.8 · 0.5% likely

    Xen

  6. Mutiple vulnerabilities in the Viridian interfaceCVE-2025-27466Xen · CVSS 9.8 · 0.5% likely

    Xen

  7. D-Link DIR-823G A1V1.0.2B05 was discovered to contain a Null-pointer dereferences in sub_4110f4(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a cra…CVE-2024-27662Dlink · CVSS 6.5 · 0.4% likely

    D-Link

  8. D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_4484A8(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a craft…CVE-2024-27661Dlink · CVSS 6.5 · 0.4% likely

    D-Link

  9. NULL pointer dereference in some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated user to potentially enable information disclosure via local access.CVE-2023-48727Intel(R) oneVPL software · CVSS 3.3 · 0.2% likely
  10. Null pointer dereference for some Intel(R) CST software before version 2.1.10300 may allow an authenticated user to potentially enable denial of service via local access.CVE-2023-41082Intel(R) CST software · CVSS 4.4 · 0.2% likely
  11. NULL pointer dereference in some Intel(R) Optane(TM) PMem Management software versions before CR_MGMT_02.00.00.4040, CR_MGMT_03.00.00.0499 may allow a authenticated user to potent…CVE-2024-36275Intel(R) Optane(TM) PMem Management software versions · CVSS 6.1 · 0.2% likely
  12. NULL pointer dereference in some Intel(R) Arc(TM) Control software before version 1.73.5335.2 may allow an authenticated user to potentially enable denial of service via local acc…CVE-2022-42879Intel · CVSS 6.1 · 0.2% likely

    Intel

  13. Null pointer dereference for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potentially enable i…CVE-2022-42878Intel · CVSS 2.8 · 0.2% likely

    Intel

  14. NULL pointer dereference in some Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows Drviers before version 31.0.101.4255 may allow authenticated user to potentially enable de…CVE-2023-25071Intel · CVSS 5.6 · 0.2% likely

    Intel

  15. NULL pointer dereference in some Intel(R) VPL software before version 24.1.4 may allow an authenticated user to potentially enable denial of service via local access.CVE-2024-28030Intel(R) VPL software · CVSS 2.2 · 0.2% likely
  16. Null pointer dereference in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalation of privilege via local access.CVE-2022-29508Intel · CVSS 6.3 · 0.2% likely

    Intel

  17. NULL pointer dereference in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.CVE-2023-23904UEFI firmware for some Intel(R) Processors · CVSS 6.1 · 0.1% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP

Updated AboutDevelopersSign in