Common Weakness Enumeration (CWE) is a list of software weaknesses.

Common Weakness Enumeration (CWE) is a list of software weaknesses.

CWE-476: NULL Pointer Dereference: A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

The product dereferences a pointer that it expects to be valid but is NULL. Created: 2006-07-19 Updated: 2025-12-11 Source: https://cwe.mitre.org/data/definitions/476.html

Common Weakness Enumeration (CWE) is a list of software weaknesses.

March 13, 2021 - NULL Pointer Dereference [CWE-476] — The Hacktivists NULL Pointer Dereference weakness occurs where software dereferences a pointer with a value of NULL instead of a valid address. Table of …

This issue occurs when you use a pointer with a value of NULL as if it points to a valid memory location. If you dereference the zero address, such as 0x00, Polyspace® considers the null address as equivalent to NULL and raises this defect.

Common Weakness Enumeration (CWE) is a list of software weaknesses.

<error id="nullPointerRedundantCheck" severity="warning" msg="Either the condition is redundant or there is possible null pointer dereference: pointer." verbose="Either the condition is redundant or there is possible null pointer dereference: pointer." cwe="476"/>

December 28, 2020 - CWE is a trademark of the MITRE Corporation. ... NULL Pointer Dereference weakness occurs where software dereferences a pointer with a value of NULL instead of a valid address.

May 8, 2025 - In the world of programming, NULL pointer dereference(CWE-476) is a common issue that can lead to crashes, instability, and even security vulnerabilities.

March 25, 2025 - The CWE-476 NULL Pointer Dereference is one of the most critical software weaknesses, consistently appearing in the 2024 CWE Top 25 Most Dangerous Software Weaknesses list. Its presence highlights the ongoing challenges developers face in ensuring ...

Pointer Validation · Memory Block Start Validation · Null Pointer Checking · Reference Nullification · Trusted Library · Variable Initialization · Variable Type Validation · Detect · − Detect · + File Analysis · Dynamic Analysis · Emulated File Analysis ·

If an attacker provides an address that appears to be well-formed, but the address does not resolve to a hostname, then the call to gethostbyaddr() will return NULL. Since the code does not check the return value from gethostbyaddr (CWE-252), a NULL pointer dereference (CWE-476) would then ...

The CWE-476: NULL Pointer Dereference vulnerability is a type of programming error that occurs when a program attempts to access an object or variable through a pointer that is NULL (or null).

It looks like your JavaScript is disabled. To use HackerOne, enable JavaScript in your browser and refresh this page

November 30, 2022 - Skip to main contentSkip to search · Powered by Zoomin Software. For more details please contactZoomin · ©2025 Black Duck Software, Inc. All Rights Reserved · Privacy PolicyTerms of Use · Powered By

October 26, 2023 - A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

Well, the CWE-476 check only looks for unchecked return values of function calls that may return null pointers. Your example does not contain such a function call, thus it cannot find this type of Null dereference.

"A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit." - Entry from the Common Weakness Enumeration For more info visit <a href="https://c...