Skip to content

CWE-690 · Input Validation and Logic

Unchecked Return Value to NULL Pointer Dereference

24CVEs

24 CVEs with CWE-690 as their weakness

CVEs with CWE-690, Most likely exploited
CVE · most likely exploitedCVSSEPSSPublished
CVE-2026-76418In CISA KEVExploitedCisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service VulnerabilityCisco · Cisco Secure Firewall Adaptive Security Appliance (ASA) Software · CVSS 8.6 · 2026-10-288.60.8%2026-10-28
CVE-2020-6095An exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of GStreamer/gst-rtsp-server 1.14.5. A specially crafted RTSP setup request can cause a null…Gstreamer Project · GStreamer · CVSS 7.5 · 2020-03-277.52.9%2020-03-27
CVE-2020-13582A denial-of-service vulnerability exists in the HTTP Server functionality of Micrium uC-HTTP 3.01.00. A specially crafted HTTP request can lead to denial of service. An attacker c…Silabs · Micrium · CVSS 8.6 · 2021-01-268.62.6%2021-01-26
CVE-2022-20682Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service VulnerabilityCisco · Cisco IOS XE Software · CVSS 8.6 · 2022-04-158.61.3%2022-04-15
CVE-2020-36646MediaArea ZenLib Ztring.cpp Date_From_Seconds_1970_Local unknown vulnerabilityMediaArea · ZenLib · CVSS 3.5 · 2023-01-073.51.3%2023-01-07
CVE-2022-41957muhammara vulnerable to Unchecked Return Value to NULL Pointer Dereferencejulianhille · MuhammaraJS · CVSS 7.5 · 2022-11-287.51.1%2022-11-28
CVE-2022-39381Unchecked Return Value to NULL Pointer Dereference in PDFDocumentHandler.cppjulianhille · MuhammaraJS · CVSS 7.5 · 2022-11-027.50.9%2022-11-02
CVE-2022-22231SRX Series: If UTM Enhanced Content Filtering and AntiVirus are enabled, and specific traffic is processed the PFE will crashJuniper Networks · Junos OS · CVSS 7.5 · 2022-10-187.50.7%2022-10-18
CVE-2024-31175NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) · libfluid · CVSS 5.3 · 2024-09-185.30.5%2024-09-18
CVE-2024-31167NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) · libfluid · CVSS 5.3 · 2024-09-185.30.5%2024-09-18
CVE-2024-31165NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) · libfluid · CVSS 5.3 · 2024-09-185.30.5%2024-09-18
CVE-2024-31164NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) · libfluid · CVSS 5.3 · 2024-09-185.30.5%2024-09-18
CVE-2024-23916NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) · libfluid · CVSS 5.3 · 2024-09-185.30.5%2024-09-18
CVE-2024-23915NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) · libfluid · CVSS 5.3 · 2024-09-185.30.5%2024-09-18
CVE-2024-23085Apfloat v1.10.1 was discovered to contain a NullPointerException via the component org.apfloat.internal.DoubleScramble::scramble(double[], int, int[]). NOTE: this is disputed by m…Mikkotommila · Apfloat · CVSS 7.5 · 2024-04-087.50.5%2024-04-08
CVE-2026-24160NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause an unchecked return value to a null pointer dereference. A successful exploit of this vulner…NVIDIA · TensorRT-LLM · CVSS 5.5 · 2026-05-205.50.5%2026-05-20
CVE-2024-31185NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) · libfluid · CVSS 5.3 · 2024-09-185.30.4%2024-09-18
CVE-2024-31182NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) · libfluid · CVSS 5.3 · 2024-09-185.30.4%2024-09-18
CVE-2024-31196NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) · libfluid · CVSS 5.3 · 2024-09-185.30.4%2024-09-18
CVE-2026-87086Tanium addressed a denial of service vulnerability in Provision.Tanium · Provision · CVSS 7.5 · 2026-10-277.50.4%2026-10-27
CVE-2024-42329JS - Crash on unexpected HTTP server responseZabbix · Zabbix · CVSS 3.3 · 2024-11-273.30.2%2024-11-27
CVE-2024-42328JS - Crash on empty HTTP server responseZabbix · Zabbix · CVSS 3.3 · 2024-11-273.30.2%2024-11-27
CVE-2022-22233Junos OS and Junos OS Evolved: In an SR to LDP interworking scenario, with SRMS, when a specific low privileged command is issued on an ABR rpd will crashJuniper Networks · Junos OS · CVSS 5.5 · 2022-10-185.50.2%2022-10-18
CVE-2025-33192NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read. A successful exploit of this vulnerability might lead to…NVIDIA · DGX Spark · CVSS 5.7 · 2025-11-255.70.2%2025-11-25

EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.

Updated AboutDevelopersSign in