The product dereferences a pointer that it expects to be valid but is NULL.
Source: MITRE CWE™ — CWE-476