Weaknesses of type CWE-476

2,328 results

Desreferência de nulo autenticada remota

A aplicação não valida corretamente se um ponteiro ou referência é nulo antes de usá-lo, permitindo que um usuário autenticado remotamente forneça entrada que causa uma desreferência de nulo. O resultado é um crash da aplicação ou, em cenários mais graves, execução de código não prevista, dependendo de como a memória é tratada.

Example

Um endpoint de API autenticada que busca um usuário por ID, mas não verifica se o resultado da busca é nulo. Um atacante autenticado fornece um ID inexistente, o código tenta acessar propriedades do resultado nulo e a aplicação falha ou se comporta de forma imprevista.

How to mitigate

Sempre validar retornos de funções que podem ser nulos antes de acessar seus membros ou métodos. Use assertions, verificações explícitas (if obj != null) ou mecanismos de linguagem como optional/Maybe types para forçar o tratamento seguro de valores nulos.

CVE-2023-24938MEDIUMWindows CryptoAPI Denial of Service VulnerabilityEPSS 2.0%CVE-2019-12654HIGHCisco IOS and IOS XE Software Session Initiation Protocol Denial of Service VulnerabilityEPSS 2.0%CVE-2019-12647HIGHCisco IOS and IOS XE Software IP Ident Denial of Service VulnerabilityEPSS 2.0%CVE-2023-21683HIGHWindows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityEPSS 2.0%CVE-2021-42528MEDIUMXMP-Toolkit Null Pointer Dereference Application denial-of-serviceEPSS 2.0%CVE-2023-35338HIGHWindows Peer Name Resolution Protocol Denial of Service VulnerabilityEPSS 2.0%CVE-2021-41689HIGHDCMTK through 3.6.6 does not handle string copy properly. Sending specific requests to the dcmqrdb program, it would query its database and EPSS 2.0%CVE-2023-2953HIGHA vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.EPSS 1.9%CVE-2021-39852MEDIUMAdobe Acrobat Reader DC Null Pointer Dereference Could Lead To Application Denial-of-ServiceEPSS 1.9%CVE-2021-39850MEDIUMAdobe Acrobat Reader DC Null Pointer Dereference Could Lead To Application Denial-of-ServiceEPSS 1.9%CVE-2021-39849MEDIUMAdobe Acrobat Reader DC Null Pointer Dereference Could Lead To Application Denial-of-ServiceEPSS 1.9%CVE-2021-39851MEDIUMAdobe Acrobat Reader DC Null Pointer Dereference Could Lead To Application Denial-of-ServiceEPSS 1.9%CVE-2021-20274—A flaw was found in privoxy before 3.0.32. A crash may occur due a NULL-pointer dereference when the socks server misbehaves.EPSS 1.9%CVE-2021-35985MEDIUMAdobe Acrobat Pro DC PDFLibTool Null Pointer Dereference BugEPSS 1.9%CVE-2019-1900HIGHCisco Integrated Management Controller Unauthenticated Denial of Service VulnerabilityEPSS 1.9%CVE-2021-3596—A NULL pointer dereference flaw was found in ImageMagick in versions prior to 7.0.10-31 in ReadSVGImage() in coders/svg.c. This issue is dueEPSS 1.9%CVE-2020-13583HIGHA denial-of-service vulnerability exists in the HTTP Server functionality of Micrium uC-HTTP 3.01.00. A specially crafted HTTP request can lEPSS 1.9%CVE-2025-0492HIGHD-Link DIR-823X FUN_00412244 null pointer dereferenceEPSS 1.9%CVE-2021-28601LOWAdobe After Effects NULL Pointer Dereference vulnerabilityEPSS 1.9%CVE-2025-11848MEDIUMA null pointer dereference vulnerability in the Wake-on-LAN CGI program of the Zyxel VMG3625-T50B firmware version through 5.50(ABPM.9.6)C0 EPSS 1.8%