Skip to content

CWE-690 · weakness in Input Validation and Logic

Unchecked Return Value to NULL Pointer Dereference

24 CVEs · 1 exploited

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
1

Every one of the 24 is a mark on the map. Named now: 1 to 24, most at risk first.

  1. Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service VulnerabilityCVE-2026-76418Cisco · CVSS 8.6 · 0.8% likelycovered by CyberSIXT

    Cisco8 articles1 article this week: CISA flags Cisco and Openwave flaws as actively exploited

  2. An exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of GStreamer/gst-rtsp-server 1.14.5. A specially crafted RTSP setup request can cause a null…CVE-2020-6095GStreamer · CVSS 7.5 · 2.9% likely
  3. A denial-of-service vulnerability exists in the HTTP Server functionality of Micrium uC-HTTP 3.01.00. A specially crafted HTTP request can lead to denial of service. An attacker c…CVE-2020-13582Micrium · CVSS 8.6 · 2.6% likely
  4. Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service VulnerabilityCVE-2022-20682Cisco · CVSS 8.6 · 1.3% likely

    Cisco

  5. MediaArea ZenLib Ztring.cpp Date_From_Seconds_1970_Local unknown vulnerabilityCVE-2020-36646MediaArea · CVSS 3.5 · 1.3% likely

    MediaArea

  6. muhammara vulnerable to Unchecked Return Value to NULL Pointer DereferenceCVE-2022-41957julianhille · CVSS 7.5 · 1.1% likely
  7. Unchecked Return Value to NULL Pointer Dereference in PDFDocumentHandler.cppCVE-2022-39381julianhille · CVSS 7.5 · 0.9% likely
  8. SRX Series: If UTM Enhanced Content Filtering and AntiVirus are enabled, and specific traffic is processed the PFE will crashCVE-2022-22231Juniper Networks · CVSS 7.5 · 0.7% likely

    Juniper Networks

  9. NULL Pointer Dereference in libfluid_msg libraryCVE-2024-31175Open Networking Foundation (ONF) · CVSS 5.3 · 0.5% likely

    Open Networking Foundation (ONF)

  10. NULL Pointer Dereference in libfluid_msg libraryCVE-2024-31167Open Networking Foundation (ONF) · CVSS 5.3 · 0.5% likely

    Open Networking Foundation (ONF)

  11. NULL Pointer Dereference in libfluid_msg libraryCVE-2024-31165Open Networking Foundation (ONF) · CVSS 5.3 · 0.5% likely

    Open Networking Foundation (ONF)

  12. NULL Pointer Dereference in libfluid_msg libraryCVE-2024-31164Open Networking Foundation (ONF) · CVSS 5.3 · 0.5% likely

    Open Networking Foundation (ONF)

  13. NULL Pointer Dereference in libfluid_msg libraryCVE-2024-23916Open Networking Foundation (ONF) · CVSS 5.3 · 0.5% likely

    Open Networking Foundation (ONF)

  14. NULL Pointer Dereference in libfluid_msg libraryCVE-2024-23915Open Networking Foundation (ONF) · CVSS 5.3 · 0.5% likely

    Open Networking Foundation (ONF)

  15. Apfloat v1.10.1 was discovered to contain a NullPointerException via the component org.apfloat.internal.DoubleScramble::scramble(double[], int, int[]). NOTE: this is disputed by m…CVE-2024-23085Mikkotommila · CVSS 7.5 · 0.5% likely
  16. NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause an unchecked return value to a null pointer dereference. A successful exploit of this vulner…CVE-2026-24160NVIDIA · CVSS 5.5 · 0.5% likely

    NVIDIA

  17. NULL Pointer Dereference in libfluid_msg libraryCVE-2024-31185Open Networking Foundation (ONF) · CVSS 5.3 · 0.4% likely

    Open Networking Foundation (ONF)

  18. NULL Pointer Dereference in libfluid_msg libraryCVE-2024-31182Open Networking Foundation (ONF) · CVSS 5.3 · 0.4% likely

    Open Networking Foundation (ONF)

  19. NULL Pointer Dereference in libfluid_msg libraryCVE-2024-31196Open Networking Foundation (ONF) · CVSS 5.3 · 0.4% likely

    Open Networking Foundation (ONF)

  20. Tanium addressed a denial of service vulnerability in Provision.CVE-2026-87086Tanium · CVSS 7.5 · 0.4% likely

    Tanium

  21. JS - Crash on unexpected HTTP server responseCVE-2024-42329Zabbix · CVSS 3.3 · 0.2% likely

    Zabbix

  22. JS - Crash on empty HTTP server responseCVE-2024-42328Zabbix · CVSS 3.3 · 0.2% likely

    Zabbix

  23. Junos OS and Junos OS Evolved: In an SR to LDP interworking scenario, with SRMS, when a specific low privileged command is issued on an ABR rpd will crashCVE-2022-22233Juniper Networks · CVSS 5.5 · 0.2% likely

    Juniper Networks

  24. NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read. A successful exploit of this vulnerability might lead to…CVE-2025-33192NVIDIA · CVSS 5.7 · 0.2% likely

    NVIDIA

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in