CWE-690 · Input Validation and Logic
Unchecked Return Value to NULL Pointer Dereference
24CVEs
SortMost likely exploited
24 CVEs with CWE-690 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-76418In CISA KEVExploitedCisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service VulnerabilityCisco · Cisco Secure Firewall Adaptive Security Appliance (ASA) Software · CVSS 8.6 · 2026-10-28 | 8.6 | 0.8% | 2026-10-28 |
| CVE-2020-6095An exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of GStreamer/gst-rtsp-server 1.14.5. A specially crafted RTSP setup request can cause a null…Gstreamer Project · GStreamer · CVSS 7.5 · 2020-03-27 | 7.5 | 2.9% | 2020-03-27 |
| CVE-2020-13582A denial-of-service vulnerability exists in the HTTP Server functionality of Micrium uC-HTTP 3.01.00. A specially crafted HTTP request can lead to denial of service. An attacker c…Silabs · Micrium · CVSS 8.6 · 2021-01-26 | 8.6 | 2.6% | 2021-01-26 |
| CVE-2022-20682Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service VulnerabilityCisco · Cisco IOS XE Software · CVSS 8.6 · 2022-04-15 | 8.6 | 1.3% | 2022-04-15 |
| CVE-2020-36646MediaArea ZenLib Ztring.cpp Date_From_Seconds_1970_Local unknown vulnerabilityMediaArea · ZenLib · CVSS 3.5 · 2023-01-07 | 3.5 | 1.3% | 2023-01-07 |
| CVE-2022-41957muhammara vulnerable to Unchecked Return Value to NULL Pointer Dereferencejulianhille · MuhammaraJS · CVSS 7.5 · 2022-11-28 | 7.5 | 1.1% | 2022-11-28 |
| CVE-2022-39381Unchecked Return Value to NULL Pointer Dereference in PDFDocumentHandler.cppjulianhille · MuhammaraJS · CVSS 7.5 · 2022-11-02 | 7.5 | 0.9% | 2022-11-02 |
| CVE-2022-22231SRX Series: If UTM Enhanced Content Filtering and AntiVirus are enabled, and specific traffic is processed the PFE will crashJuniper Networks · Junos OS · CVSS 7.5 · 2022-10-18 | 7.5 | 0.7% | 2022-10-18 |
| CVE-2024-31175NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) · libfluid · CVSS 5.3 · 2024-09-18 | 5.3 | 0.5% | 2024-09-18 |
| CVE-2024-31167NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) · libfluid · CVSS 5.3 · 2024-09-18 | 5.3 | 0.5% | 2024-09-18 |
| CVE-2024-31165NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) · libfluid · CVSS 5.3 · 2024-09-18 | 5.3 | 0.5% | 2024-09-18 |
| CVE-2024-31164NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) · libfluid · CVSS 5.3 · 2024-09-18 | 5.3 | 0.5% | 2024-09-18 |
| CVE-2024-23916NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) · libfluid · CVSS 5.3 · 2024-09-18 | 5.3 | 0.5% | 2024-09-18 |
| CVE-2024-23915NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) · libfluid · CVSS 5.3 · 2024-09-18 | 5.3 | 0.5% | 2024-09-18 |
| CVE-2024-23085Apfloat v1.10.1 was discovered to contain a NullPointerException via the component org.apfloat.internal.DoubleScramble::scramble(double[], int, int[]). NOTE: this is disputed by m…Mikkotommila · Apfloat · CVSS 7.5 · 2024-04-08 | 7.5 | 0.5% | 2024-04-08 |
| CVE-2026-24160NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause an unchecked return value to a null pointer dereference. A successful exploit of this vulner…NVIDIA · TensorRT-LLM · CVSS 5.5 · 2026-05-20 | 5.5 | 0.5% | 2026-05-20 |
| CVE-2024-31185NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) · libfluid · CVSS 5.3 · 2024-09-18 | 5.3 | 0.4% | 2024-09-18 |
| CVE-2024-31182NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) · libfluid · CVSS 5.3 · 2024-09-18 | 5.3 | 0.4% | 2024-09-18 |
| CVE-2024-31196NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) · libfluid · CVSS 5.3 · 2024-09-18 | 5.3 | 0.4% | 2024-09-18 |
| CVE-2026-87086Tanium addressed a denial of service vulnerability in Provision.Tanium · Provision · CVSS 7.5 · 2026-10-27 | 7.5 | 0.4% | 2026-10-27 |
| CVE-2024-42329JS - Crash on unexpected HTTP server responseZabbix · Zabbix · CVSS 3.3 · 2024-11-27 | 3.3 | 0.2% | 2024-11-27 |
| CVE-2024-42328JS - Crash on empty HTTP server responseZabbix · Zabbix · CVSS 3.3 · 2024-11-27 | 3.3 | 0.2% | 2024-11-27 |
| CVE-2022-22233Junos OS and Junos OS Evolved: In an SR to LDP interworking scenario, with SRMS, when a specific low privileged command is issued on an ABR rpd will crashJuniper Networks · Junos OS · CVSS 5.5 · 2022-10-18 | 5.5 | 0.2% | 2022-10-18 |
| CVE-2025-33192NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read. A successful exploit of this vulnerability might lead to…NVIDIA · DGX Spark · CVSS 5.7 · 2025-11-25 | 5.7 | 0.2% | 2025-11-25 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.