Weaknesses of type CWE-824

227 results

Ponteiro não inicializado

Ocorre quando um ponteiro é usado sem ter recebido um endereço de memória válido antes. O código tenta acessar ou modificar dados através de um ponteiro que aponta para uma posição arbitrária ou lixo de memória, causando comportamento impredizível, corrupção de dados ou crash.

Example

Uma função aloca memória para uma estrutura, mas em um caminho de execução esquece de inicializar um ponteiro dentro dela. Quando outra parte do código tenta usar esse ponteiro, ele aponta para lixo de memória, causando leitura ou escrita em endereços inválidos.

How to mitigate

Sempre inicialize ponteiros explicitamente no ponto de declaração (com NULL ou um endereço válido) e valide antes de usar. Use ferramentas de análise estática (Clang Static Analyzer, Valgrind) e, em linguagens modernas, prefira gerenciamento automático de memória ou smart pointers ao invés de ponteiros brutos.

CVE-2026-54920NONEOpenEXR: Integer overflow and uninitialized pointer cause invalid delete in OpenEXRUtil image resizeEPSS 0.4%CVE-2023-26334HIGHZDI-CAN-20149: Adobe Dimension USD File Parsing Uninitialized Pointer Information Disclosure VulnerabilityEPSS 0.4%CVE-2023-34288HIGHAshlar-Vellum Cobalt XE File Parsing Uninitialized Pointer Remote Code Execution VulnerabilityEPSS 0.3%CVE-2023-21618HIGHZDI-CAN-20963: Adobe Substance 3D Designer SBS File Parsing Uninitialized Variable Remote Code Execution VulnerabilityEPSS 0.3%CVE-2023-29278HIGHZDI-CAN-20371: Adobe Substance 3D Painter GLTF File Parsing Uninitialized Variable Information Disclosure VulnerabilityEPSS 0.3%CVE-2026-109774CRITICALInvalid pointer, undefined behavior in the DOM: Notifications componentEPSS 0.3%CVE-2026-117871HIGHInvalid pointer in the Graphics componentEPSS 0.3%CVE-2026-117910HIGHInvalid pointer in the JavaScript Engine componentEPSS 0.3%CVE-2025-1047HIGHLuxion KeyShot PVS File Parsing Access of Uninitialized Pointer Remote Code Execution VulnerabilityEPSS 0.3%CVE-2025-43545HIGHBridge | Access of Uninitialized Pointer (CWE-824)EPSS 0.3%CVE-2023-47047MEDIUMZDI-CAN-21685: Adobe Audition MP4 File Parsing Uninitialized Variable Remote Code Execution VulnerabilityEPSS 0.3%CVE-2023-47060LOWZDI-CAN-21792: Adobe Premiere Pro MP4 File Uninitialized Variable Information Disclosure VulnerabilityEPSS 0.3%CVE-2023-26344MEDIUMZDI-CAN-19467: Adobe Dimension USD File Access of Uninitialized Pointer Information Disclosure VulnerabilityEPSS 0.3%CVE-2023-4508MEDIUMDenial of Service in GerbvEPSS 0.3%CVE-2021-3593—An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() functiEPSS 0.3%CVE-2021-3594—An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp_input() functioEPSS 0.3%CVE-2022-33280HIGHAccess of uninitialized pointer in Bluetooth HOSTEPSS 0.3%CVE-2021-3592—An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the bootp_input() functEPSS 0.3%CVE-2021-3595—An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the tftp_input() functiEPSS 0.3%CVE-2023-26387MEDIUMZDI-CAN-20265: Adobe Substance 3D Stager USDC File Parsing Uninitialized Variable Information Disclosure VulnerabilityEPSS 0.3%