Weaknesses of type CWE-476

2,328 results

Desreferência de nulo autenticada remota

A aplicação não valida corretamente se um ponteiro ou referência é nulo antes de usá-lo, permitindo que um usuário autenticado remotamente forneça entrada que causa uma desreferência de nulo. O resultado é um crash da aplicação ou, em cenários mais graves, execução de código não prevista, dependendo de como a memória é tratada.

Example

Um endpoint de API autenticada que busca um usuário por ID, mas não verifica se o resultado da busca é nulo. Um atacante autenticado fornece um ID inexistente, o código tenta acessar propriedades do resultado nulo e a aplicação falha ou se comporta de forma imprevista.

How to mitigate

Sempre validar retornos de funções que podem ser nulos antes de acessar seus membros ou métodos. Use assertions, verificações explícitas (if obj != null) ou mecanismos de linguagem como optional/Maybe types para forçar o tratamento seguro de valores nulos.

CVE-2022-1674MEDIUMNULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in vim/vimEPSS 1.5%CVE-2017-2635HIGHA NULL pointer deference flaw was found in the way libvirt from 2.5.0 to 3.0.0 handled empty drives. A remote authenticated attacker could uEPSS 1.5%CVE-2025-8175HIGHD-Link DI-8400 jhttpd usb_paswd.asp null pointer dereferenceEPSS 1.5%CVE-2024-7006HIGHLibtiff: null pointer dereference in tif_dirinfo.cEPSS 1.5%CVE-2022-0696MEDIUMNULL Pointer Dereference in vim/vimEPSS 1.5%CVE-2020-3407HIGHCisco IOS XE Software RESTCONF and NETCONF-YANG Access Control List Denial of Service VulnerabilityEPSS 1.5%CVE-2021-27631HIGHSAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC -EPSS 1.5%CVE-2021-27607HIGHSAP NetWeaver ABAP Server and ABAP Platform (Dispatcher), versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.2EPSS 1.5%CVE-2021-27630HIGHSAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC -EPSS 1.5%CVE-2021-27632HIGHSAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC -EPSS 1.5%CVE-2025-53716MEDIUMWindows Local Security Authority Subsystem Service (LSASS) Denial of Service VulnerabilityEPSS 1.5%CVE-2022-24736LOWA Malformed Lua script can crash RedisEPSS 1.5%CVE-2022-2547HIGHSofting Secure Integration Server NULL Pointer DereferenceEPSS 1.5%CVE-2022-47015MEDIUMMariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spider_db_mbase::print_warnings toEPSS 1.5%CVE-2022-2337HIGHSofting Secure Integration Server NULL Pointer DereferenceEPSS 1.5%CVE-2019-3840MEDIUMA NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU ageEPSS 1.5%CVE-2023-27787HIGHAn issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse_list function at the list.c:81 endpoinEPSS 1.5%CVE-2023-27785HIGHAn issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse endpoints function.EPSS 1.5%CVE-2023-27786HIGHAn issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the macinstring function.EPSS 1.5%CVE-2023-27784HIGHAn issue found in TCPReplay v.4.4.3 allows a remote attacker to cause a denial of service via the read_hexstring function at the utils.c:309EPSS 1.5%