Weaknesses of type CWE-824

227 results

Ponteiro não inicializado

Ocorre quando um ponteiro é usado sem ter recebido um endereço de memória válido antes. O código tenta acessar ou modificar dados através de um ponteiro que aponta para uma posição arbitrária ou lixo de memória, causando comportamento impredizível, corrupção de dados ou crash.

Example

Uma função aloca memória para uma estrutura, mas em um caminho de execução esquece de inicializar um ponteiro dentro dela. Quando outra parte do código tenta usar esse ponteiro, ele aponta para lixo de memória, causando leitura ou escrita em endereços inválidos.

How to mitigate

Sempre inicialize ponteiros explicitamente no ponto de declaração (com NULL ou um endereço válido) e valide antes de usar. Use ferramentas de análise estática (Clang Static Analyzer, Valgrind) e, em linguagens modernas, prefira gerenciamento automático de memória ou smart pointers ao invés de ponteiros brutos.

CVE-2025-59962MEDIUMJunos OS and Junos OS Evolved: With BGP sharding enabled, change in indirect next-hop can cause RPD crashEPSS 0.2%CVE-2021-37666HIGHReference binding to nullptr in `RaggedTensorToVariant` in TensorFlowEPSS 0.2%CVE-2021-37667HIGHReference binding to nullptr in unicode encoding in TensorFlowEPSS 0.2%CVE-2021-37671HIGHReference binding to nullptr in map operations in TensorFlowEPSS 0.2%CVE-2021-41208HIGHIncomplete validation in boosted trees codeEPSS 0.2%CVE-2021-37676HIGHReference binding to nullptr in shape inference in TensorFlowEPSS 0.2%CVE-2026-110603MEDIUMLASzip through 3.5.0 Invalid Free via Truncated VLR Header in laszip_read_headerEPSS 0.2%CVE-2021-37657HIGHReference binding to nullptr in `MatrixDiagV*` ops in TensorFlowEPSS 0.2%CVE-2021-37658HIGHReference binding to nullptr in `MatrixSetDiagV*` ops in TensorFlowEPSS 0.2%CVE-2021-37656HIGHReference binding to nullptr in `RaggedTensorToSparse` in TensorFlowEPSS 0.2%CVE-2024-32998MEDIUMNULL pointer access vulnerability in the clock module Impact: Successful exploitation of this vulnerability will affect availability.EPSS 0.2%CVE-2026-47908HIGHDreamweaver Desktop | Access of Uninitialized Pointer (CWE-824)EPSS 0.2%CVE-2021-26093MEDIUMAn access of uninitialized pointer (CWE-824) vulnerability in FortiWLC versions 8.6.0, 8.5.3 and earlier may allow a local and authenticatedEPSS 0.2%CVE-2026-6870MEDIUMAccess of Uninitialized Pointer in WiresharkEPSS 0.2%CVE-2026-27300MEDIUMAdobe Framemaker | Access of Uninitialized Pointer (CWE-824)EPSS 0.2%CVE-2026-88054MEDIUMTesseract: Denial of service via empty-stack dereference in Plumbing/Series at model loadEPSS 0.2%CVE-2021-41204MEDIUMSegfault while copying constant resource tensorEPSS 0.1%CVE-2025-58777HIGHVT Studio versions 8.53 and prior contain an access of uninitialized pointer vulnerability. If the product uses a specially crafted file, arEPSS 0.1%CVE-2026-47528HIGHNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause an access of an uniniEPSS 0.1%CVE-2025-13499HIGHAccess of Uninitialized Pointer in WiresharkEPSS 0.1%