Weaknesses of type CWE-476

2,333 results

Desreferência de nulo autenticada remota

A aplicação não valida corretamente se um ponteiro ou referência é nulo antes de usá-lo, permitindo que um usuário autenticado remotamente forneça entrada que causa uma desreferência de nulo. O resultado é um crash da aplicação ou, em cenários mais graves, execução de código não prevista, dependendo de como a memória é tratada.

Example

Um endpoint de API autenticada que busca um usuário por ID, mas não verifica se o resultado da busca é nulo. Um atacante autenticado fornece um ID inexistente, o código tenta acessar propriedades do resultado nulo e a aplicação falha ou se comporta de forma imprevista.

How to mitigate

Sempre validar retornos de funções que podem ser nulos antes de acessar seus membros ou métodos. Use assertions, verificações explícitas (if obj != null) ou mecanismos de linguagem como optional/Maybe types para forçar o tratamento seguro de valores nulos.

CVE-2025-52424MEDIUMQTS, QuTS heroEPSS 0.5%CVE-2026-76928HIGHNULL Pointer Dereference in WiresharkEPSS 0.5%CVE-2026-17251HIGHUnauthenticated Denial of Service via Null Pointer Dereference in HTTP Request ParsingEPSS 0.5%CVE-2026-47143MEDIUMCapstone has a NULL Pointer Dereference with 3DNow! opcodesEPSS 0.5%CVE-2025-61101HIGHFRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_rmt_itf_addr functionEPSS 0.5%CVE-2025-61100HIGHFRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the ospf_opaque_lsa_dump function at ospf_oEPSS 0.5%CVE-2025-61105HIGHFRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_link_info function at ospf_extEPSS 0.5%CVE-2025-61099HIGHFRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the opaque_info_detail function at ospf_opaEPSS 0.5%CVE-2025-61102HIGHFRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_adj_sid function at oEPSS 0.5%CVE-2025-55657HIGHA NULL pointer dereference in the gf_odf_vvc_cfg_write_bs function (odf/descriptors.c) of GPAC MP4Box v2.4 allows attackers to cause a DeniaEPSS 0.5%CVE-2026-76868MEDIUMNetcore NR255-V 1.5.130703 NULL Pointer Dereference in route_policy_add.cgi via Missing exit_portEPSS 0.5%CVE-2026-76865MEDIUMNetcore NR255-V 1.5.130703 NULL Pointer Dereference via Unchecked atoi() in QoS Setter HandlersEPSS 0.5%CVE-2024-11706MEDIUMA null pointer dereference may have inadvertently occurred in `pk12util`, and specifically in the `SEC_ASN1DecodeItem_Util` function, when hEPSS 0.5%CVE-2026-31931HIGHSuricata tls: null dereference in tls.alpn rule keywordEPSS 0.5%CVE-2026-11810HIGHNULL-pointer dereference in UpdateHub OTA agent on empty inner metadata array (remote DoS)EPSS 0.5%CVE-2026-59949MEDIUMyawkat LZ4 Java: JVM Crash via Null Byte Array in lz4-java Streaming XXHash JNI (StreamingXXHash32JNI / StreamingXXHash64JNI)EPSS 0.5%CVE-2025-56225HIGHfluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in fluid_synth_monopoly.c, that can be triggered when loadinEPSS 0.5%CVE-2022-2153—A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write tEPSS 0.5%CVE-2024-34044MEDIUMThe O-RAN E2T I-Release buildPrometheusList function can have a NULL pointer dereference because peerInfo can be NULL.EPSS 0.5%CVE-2024-12660MEDIUMIObit Advanced SystemCare Utimate IOCTL AscRegistryFilter.sys 0x8001E018 null pointer dereferenceEPSS 0.5%