Weaknesses of type CWE-824

208 results

Ponteiro não inicializado

Ocorre quando um ponteiro é usado sem ter recebido um endereço de memória válido antes. O código tenta acessar ou modificar dados através de um ponteiro que aponta para uma posição arbitrária ou lixo de memória, causando comportamento impredizível, corrupção de dados ou crash.

Example

Uma função aloca memória para uma estrutura, mas em um caminho de execução esquece de inicializar um ponteiro dentro dela. Quando outra parte do código tenta usar esse ponteiro, ele aponta para lixo de memória, causando leitura ou escrita em endereços inválidos.

How to mitigate

Sempre inicialize ponteiros explicitamente no ponto de declaração (com NULL ou um endereço válido) e valide antes de usar. Use ferramentas de análise estática (Clang Static Analyzer, Valgrind) e, em linguagens modernas, prefira gerenciamento automático de memória ou smart pointers ao invés de ponteiros brutos.

CVE-2023-38246HIGHAdobe Acrobat Reader DC ActiveX Control (AxAcroPDFLib.AxAcroPDF) stack-based stale pointer vulnerabilityEPSS 0.4%CVE-2024-24449MEDIUMAn uninitialized pointer dereference in the NasPdu::NasPdu component of OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a DEPSS 0.4%CVE-2023-35715HIGHAshlar-Vellum Cobalt AR File Parsing Uninitialized Memory Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-35713HIGHAshlar-Vellum Cobalt XE File Parsing Uninitialized Memory Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-2805CRITICALInvalid pointer in the DOM: Core & HTML componentEPSS 0.4%CVE-2023-34272HIGHFatek Automation FvDesigner FPJ File Parsing Uninitialized Pointer Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-35712HIGHAshlar-Vellum Cobalt XE File Parsing Uninitialized Memory Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-34263HIGHFatek Automation FvDesigner FPJ File Parsing Uninitialized Pointer Remote Code Execution VulnerabilityEPSS 0.4%CVE-2022-34244MEDIUMAdobe Photoshop U3D File Parsing Access of Uninitialized Pointer Information Disclosure VulnerabilityEPSS 0.4%CVE-2022-42895MEDIUMInfo Leak in l2cap_core in the Linux KernelEPSS 0.4%CVE-2025-26599HIGHXorg: xwayland: use of uninitialized pointer in compredirectwindow()EPSS 0.4%CVE-2026-6749HIGHInformation disclosure due to uninitialized memory in the Graphics: Canvas2D componentEPSS 0.4%CVE-2026-6748CRITICALUninitialized memory in the Audio/Video: Web Codecs componentEPSS 0.4%CVE-2026-2785HIGHInvalid pointer in the JavaScript Engine componentEPSS 0.4%CVE-2023-47072LOWZDI-CAN-21790: Adobe After Effects MP4 File Uninitialized Variable Information Disclosure VulnerabilityEPSS 0.4%CVE-2024-47411HIGHAnimate | Access of Uninitialized Pointer (CWE-824)EPSS 0.4%CVE-2025-59478HIGHBIG-IP AFM DoS protection profile vulnerabilityEPSS 0.4%CVE-2023-47044MEDIUMZDI-CAN-21789: Adobe Media Encoder MP4 File Uninitialized Variable Information Disclosure VulnerabilityEPSS 0.4%CVE-2023-44362MEDIUMZDI-CAN-21791: Adobe Prelude MP4 File Uninitialized Variable Information Disclosure VulnerabilityEPSS 0.4%CVE-2023-44329MEDIUMZDI-CAN-21798: Adobe Bridge MP4 File Parsing Uninitialized Variable Information Disclosure VulnerabilityEPSS 0.4%