Weaknesses of type CWE-824

208 results

Ponteiro não inicializado

Ocorre quando um ponteiro é usado sem ter recebido um endereço de memória válido antes. O código tenta acessar ou modificar dados através de um ponteiro que aponta para uma posição arbitrária ou lixo de memória, causando comportamento impredizível, corrupção de dados ou crash.

Example

Uma função aloca memória para uma estrutura, mas em um caminho de execução esquece de inicializar um ponteiro dentro dela. Quando outra parte do código tenta usar esse ponteiro, ele aponta para lixo de memória, causando leitura ou escrita em endereços inválidos.

How to mitigate

Sempre inicialize ponteiros explicitamente no ponto de declaração (com NULL ou um endereço válido) e valide antes de usar. Use ferramentas de análise estática (Clang Static Analyzer, Valgrind) e, em linguagens modernas, prefira gerenciamento automático de memória ou smart pointers ao invés de ponteiros brutos.

CVE-2021-41538—A vulnerability has been identified in NX 1953 Series (All versions < V1973.3700), NX 1980 Series (All versions < V1988), Solid Edge SE2021 EPSS 1.0%CVE-2021-42702LOWInkscape Access of Uninitialized PointerEPSS 1.0%CVE-2022-22198HIGHJunos OS: MX MS-MPC or MS-MIC, or SRX SPC crashes if it receives a SIP message with a specific contact header formatEPSS 0.9%CVE-2020-8110MEDIUMBitdefender ceva_emu.cvd module denial-of-service (VA-8766)EPSS 0.9%CVE-2022-1809HIGHAccess of Uninitialized Pointer in radareorg/radare2EPSS 0.9%CVE-2023-30847HIGHH2O vulnerable to read from uninitialized pointer in the reverse proxy handlerEPSS 0.9%CVE-2023-29178MEDIUMA access of uninitialized pointer vulnerability [CWE-824] in Fortinet FortiProxy version 7.2.0 through 7.2.3 and before 7.0.9 and FortiOS vEPSS 0.9%CVE-2021-29095MEDIUMArcGIS Server image service and raster analytics security update: uninitialized pointerEPSS 0.9%CVE-2022-38138HIGHThe Triangle Microworks IEC 61850 Library (Any client or server using the C language library with a version number of 11.2.0 or earlier and EPSS 0.9%CVE-2021-34596MEDIUMCODESYS V2 runtime: Access of Uninitialized Pointer may result in denial-of-serviceEPSS 0.9%CVE-2023-24826MEDIUMUsage of Uninitialized Timer during forwarding of Fragments with SFREPSS 0.8%CVE-2022-46280CRITICALA use of uninitialized pointer vulnerability exists in the PQS format pFormat functionality of Open Babel 3.1.1 and master commit 530dbfa3. EPSS 0.8%CVE-2022-45861MEDIUMAn access of uninitialized pointer vulnerability [CWE-824] in the SSL VPN portal of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.EPSS 0.8%CVE-2022-44451CRITICALA use of uninitialized pointer vulnerability exists in the MSI format atom functionality of Open Babel 3.1.1 and master commit 530dbfa3. A sEPSS 0.8%CVE-2022-42885CRITICALA use of uninitialized pointer vulnerability exists in the GRO format res functionality of Open Babel 3.1.1 and master commit 530dbfa3. A spEPSS 0.8%CVE-2022-29033—A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), TeamcentEPSS 0.8%CVE-2026-42959HIGHCrash during DNSSEC validation of malicious contentEPSS 0.8%CVE-2022-23636MEDIUMInvalid drop of partially-initialized instances in wasmtimeEPSS 0.8%CVE-2026-45736MEDIUMws: Uninitialized memory disclosureEPSS 0.7%CVE-2022-21168LOWICSA-22-090-03 Fuji Electric Alpha5EPSS 0.7%