Weaknesses of type CWE-824

227 results

Ponteiro não inicializado

Ocorre quando um ponteiro é usado sem ter recebido um endereço de memória válido antes. O código tenta acessar ou modificar dados através de um ponteiro que aponta para uma posição arbitrária ou lixo de memória, causando comportamento impredizível, corrupção de dados ou crash.

Example

Uma função aloca memória para uma estrutura, mas em um caminho de execução esquece de inicializar um ponteiro dentro dela. Quando outra parte do código tenta usar esse ponteiro, ele aponta para lixo de memória, causando leitura ou escrita em endereços inválidos.

How to mitigate

Sempre inicialize ponteiros explicitamente no ponto de declaração (com NULL ou um endereço válido) e valide antes de usar. Use ferramentas de análise estática (Clang Static Analyzer, Valgrind) e, em linguagens modernas, prefira gerenciamento automático de memória ou smart pointers ao invés de ponteiros brutos.

CVE-2023-29286MEDIUMZDI-CAN-20369: Adobe Substance 3D Painter USD File Parsing Uninitialized Variable Information Disclosure VulnerabilityEPSS 0.3%CVE-2023-26386MEDIUMZDI-CAN-20266: Adobe Substance 3D Stager USDC File Parsing Uninitialized Variable Information Disclosure VulnerabilityEPSS 0.3%CVE-2025-27162HIGHAcrobat Reader | Access of Uninitialized Pointer (CWE-824)EPSS 0.3%CVE-2026-66081HIGHApache Thrift: c_glib read_message_begin leaves output parameters unset for non-versioned messagesEPSS 0.3%CVE-2026-115327MEDIUMlibyang through 6.4.13 Uninitialized Pointer Free in NETCONF RPC ParserEPSS 0.3%CVE-2024-24925HIGHA vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected application is vulnerable to uninitialized EPSS 0.3%CVE-2026-6751HIGHUninitialized memory in the Audio/Video: Web Codecs componentEPSS 0.3%CVE-2026-47738MEDIUMliboqs: Uninitialized function-pointer dereference in OQS_KEM_encaps_derand for NTRU KEMsEPSS 0.3%CVE-2025-66588HIGHAccess of Uninitialized Pointer vulnerability in AzeoTech DAQFactoryEPSS 0.3%CVE-2024-21919HIGHRockwell Automation Arena Simulation Vulnerable To Uninitialized PointerEPSS 0.3%CVE-2025-43557HIGHAnimate | Access of Uninitialized Pointer (CWE-824)EPSS 0.3%CVE-2025-30326HIGHPhotoshop Desktop | Access of Uninitialized Pointer (CWE-824)EPSS 0.3%CVE-2025-54207HIGHInDesign Desktop | Access of Uninitialized Pointer (CWE-824)EPSS 0.3%CVE-2023-27858HIGHRockwell Automation Arena® Simulation Uninitialized Pointer VulnerabilityEPSS 0.3%CVE-2025-49529HIGHIllustrator | Access of Uninitialized Pointer (CWE-824)EPSS 0.3%CVE-2025-43592HIGHInDesign Desktop | Access of Uninitialized Pointer (CWE-824)EPSS 0.3%CVE-2026-39458HIGHBIG-IP DNS Cache vulnerabilityEPSS 0.3%CVE-2022-3378HIGH Horner Automation's Cscape version 9.90 SP 7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed EPSS 0.3%CVE-2022-3377HIGHHorner Automation's Cscape version 9.90 SP 6 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FEPSS 0.3%CVE-2022-41851HIGHA vulnerability has been identified in JTTK (All versions < V11.1.1.0), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap EPSS 0.3%