Weaknesses of type CWE-824

208 results

Ponteiro não inicializado

Ocorre quando um ponteiro é usado sem ter recebido um endereço de memória válido antes. O código tenta acessar ou modificar dados através de um ponteiro que aponta para uma posição arbitrária ou lixo de memória, causando comportamento impredizível, corrupção de dados ou crash.

Example

Uma função aloca memória para uma estrutura, mas em um caminho de execução esquece de inicializar um ponteiro dentro dela. Quando outra parte do código tenta usar esse ponteiro, ele aponta para lixo de memória, causando leitura ou escrita em endereços inválidos.

How to mitigate

Sempre inicialize ponteiros explicitamente no ponto de declaração (com NULL ou um endereço válido) e valide antes de usar. Use ferramentas de análise estática (Clang Static Analyzer, Valgrind) e, em linguagens modernas, prefira gerenciamento automático de memória ou smart pointers ao invés de ponteiros brutos.

CVE-2021-38409HIGHFuji Electric Tellus Lite V-Simulator uninitialized pointerEPSS 0.7%CVE-2022-22236HIGHJunos OS: SRX Series and MX Series: When specific valid SIP packets are received the PFE will crashEPSS 0.7%CVE-2022-40649HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interactionEPSS 0.6%CVE-2022-40645HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interactionEPSS 0.6%CVE-2022-40643HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interactionEPSS 0.6%CVE-2022-40646HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interactionEPSS 0.6%CVE-2022-40642HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interactionEPSS 0.6%CVE-2025-2173MEDIUMlibzvbi conv.c vbi_strndup_iconv_ucs2 uninitialized pointerEPSS 0.6%CVE-2024-33608HIGHBIG-IP IPsec vulnerabilityEPSS 0.6%CVE-2025-32451HIGHA memory corruption vulnerability exists in Foxit Reader 2025.1.0.27937 due to the use of an uninitialized pointer. A specially crafted JavaEPSS 0.6%CVE-2022-34480HIGHWithin the <code>lg_init()</code> function, if several allocations succeed but then one fails, an uninitialized pointer would have been freeEPSS 0.5%CVE-2022-43609HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of IronCAD. User interaction is required to eEPSS 0.5%CVE-2022-38427HIGHAdobe Photoshop U3D File Parsing Uninitialized Variable Remote Code Execution VulnerabilityEPSS 0.5%CVE-2022-38426HIGHAdobe Photoshop U3D File Parsing Uninitialized Variable Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-16353CRITICALInvalid pointer in the DOM: Bindings (WebIDL) componentEPSS 0.5%CVE-2026-67281HIGHUnauthenticated file read in Mikrotik RouterOSEPSS 0.4%CVE-2025-27158HIGHAcrobat Reader | Access of Uninitialized Pointer (CWE-824)EPSS 0.4%CVE-2021-0209MEDIUMJunos OS Evolved: Receipt of certain valid BGP update packets from BGP peers may cause RPD to core when using REGEX.EPSS 0.4%CVE-2022-1016—A flaw was found in the Linux kernel in net/netfilter/nf_tables_core.c:nft_do_chain, which can cause a use-after-free. This issue needs to hEPSS 0.4%CVE-2024-45155HIGHAnimate | Access of Uninitialized Pointer (CWE-824)EPSS 0.4%