Weaknesses of type CWE-824

227 results

Ponteiro não inicializado

Ocorre quando um ponteiro é usado sem ter recebido um endereço de memória válido antes. O código tenta acessar ou modificar dados através de um ponteiro que aponta para uma posição arbitrária ou lixo de memória, causando comportamento impredizível, corrupção de dados ou crash.

Example

Uma função aloca memória para uma estrutura, mas em um caminho de execução esquece de inicializar um ponteiro dentro dela. Quando outra parte do código tenta usar esse ponteiro, ele aponta para lixo de memória, causando leitura ou escrita em endereços inválidos.

How to mitigate

Sempre inicialize ponteiros explicitamente no ponto de declaração (com NULL ou um endereço válido) e valide antes de usar. Use ferramentas de análise estática (Clang Static Analyzer, Valgrind) e, em linguagens modernas, prefira gerenciamento automático de memória ou smart pointers ao invés de ponteiros brutos.

CVE-2023-24563HIGHA vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The EPSS 0.2%CVE-2023-24562HIGHA vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The EPSS 0.2%CVE-2025-14739MEDIUMUninitialized Pointer Vulnerability in TP-Link WR940N and WR941NDEPSS 0.2%CVE-2024-50088HIGHbtrfs: fix uninitialized pointer free in add_inode_ref()EPSS 0.2%CVE-2024-50087HIGHbtrfs: fix uninitialized pointer free on read_alloc_one_name() errorEPSS 0.2%CVE-2021-41219HIGHUndefined behavior via `nullptr` reference binding in sparse matrix multiplicationEPSS 0.2%CVE-2023-22366HIGHCX-Motion-MCH v2.32 and earlier contains an access of uninitialized pointer vulnerability. Having a user to open a specially crafted projectEPSS 0.2%CVE-2024-8645MEDIUMAccess of Uninitialized Pointer in WiresharkEPSS 0.2%CVE-2023-49132HIGHA vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to uninitEPSS 0.2%CVE-2023-49131HIGHA vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to uninitEPSS 0.2%CVE-2023-49130HIGHA vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to uninitEPSS 0.2%CVE-2026-86847MEDIUMDpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanupEPSS 0.2%CVE-2021-29568LOWReference binding to null in `ParameterizedTruncatedNormal`EPSS 0.2%CVE-2024-57943HIGHexfat: fix the new buffer was not zeroed before writingEPSS 0.2%CVE-2021-37662HIGHReference binding to nullptr in boosted trees in TensorFlowEPSS 0.2%CVE-2023-20594—Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.EPSS 0.2%CVE-2025-23352HIGHNVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause uninitialized pointer access. EPSS 0.2%CVE-2023-20597—Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.EPSS 0.2%CVE-2026-23761MEDIUMVB-Audio Voicemeeter & Matrix Drivers DoS via Improper FILE_OBJECT FsContext InitializationEPSS 0.2%CVE-2025-59962MEDIUMJunos OS and Junos OS Evolved: With BGP sharding enabled, change in indirect next-hop can cause RPD crashEPSS 0.2%