CWE-690: Unchecked Return Value to NULL Pointer Dereference
The product does not check for an error after calling a function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference.
32 tracked CVEs are classified under this weakness.
Highest-risk vulnerabilities
- CVE-2026-24411 — iccDEV has Undefined Behavior and Null Pointer Deference in CIccTagXmlSegmentedCurve::ToXml()
- CVE-2026-24410 — iccDEV has Undefined Behavior and Null Pointer Deference in CIccProfileXml::ParseBasic()
- CVE-2026-24409 — iccDEV has Undefined Behavior and Null Pointer Deference in CIccTagXmlFloatNum<>::ParseXml()
- CVE-2026-24404 — iccDEV has Null Pointer Deference and Undefined Behavior in CIccXmlArrayType()
- CVE-2026-21689 — iccDEV has Type Confusion in CIccProfileXml::ParseBasic() at IccXML/IccLibXML/IccProfileXml.cpp
- CVE-2025-33192 — NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read
- CVE-2026-21502 — NULL Pointer Dereference in iccDEV XML Tag Parser
- CVE-2026-21499 — NULL Pointer Dereference in iccDEV XML Parser
- CVE-2026-21498 — NULL Pointer Dereference in iccDEV XML Calculator Parser
- CVE-2026-21496 — NULL Pointer Dereference in iccDEV Signature Parser
- CVE-2024-23916 — NULL Pointer Dereference in libfluid_msg library
- CVE-2024-23915 — NULL Pointer Dereference in libfluid_msg library
- CVE-2026-24160 — NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause an unchecked return value to a n
- CVE-2024-42329 — JS - Crash on unexpected HTTP server response
- CVE-2024-42328 — JS - Crash on empty HTTP server response
- CVE-2026-44638 — libsixel: NULL pointer dereference
Recently published
- CVE-2026-24160 — NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause an unchecked return value to a n
- CVE-2026-44638 — libsixel: NULL pointer dereference
- CVE-2026-24411 — iccDEV has Undefined Behavior and Null Pointer Deference in CIccTagXmlSegmentedCurve::ToXml()
- CVE-2026-24410 — iccDEV has Undefined Behavior and Null Pointer Deference in CIccProfileXml::ParseBasic()
- CVE-2026-24409 — iccDEV has Undefined Behavior and Null Pointer Deference in CIccTagXmlFloatNum<>::ParseXml()
- CVE-2026-24404 — iccDEV has Null Pointer Deference and Undefined Behavior in CIccXmlArrayType()
- CVE-2026-21689 — iccDEV has Type Confusion in CIccProfileXml::ParseBasic() at IccXML/IccLibXML/IccProfileXml.cpp
- CVE-2026-21502 — NULL Pointer Dereference in iccDEV XML Tag Parser
- CVE-2026-21499 — NULL Pointer Dereference in iccDEV XML Parser
- CVE-2026-21498 — NULL Pointer Dereference in iccDEV XML Calculator Parser
- CVE-2026-21496 — NULL Pointer Dereference in iccDEV Signature Parser
- CVE-2025-33192 — NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read
- CVE-2024-42329 — JS - Crash on unexpected HTTP server response
- CVE-2024-42328 — JS - Crash on empty HTTP server response
- CVE-2024-23916 — NULL Pointer Dereference in libfluid_msg library
- CVE-2024-23915 — NULL Pointer Dereference in libfluid_msg library