Weaknesses of type CWE-824

227 results

Ponteiro não inicializado

Ocorre quando um ponteiro é usado sem ter recebido um endereço de memória válido antes. O código tenta acessar ou modificar dados através de um ponteiro que aponta para uma posição arbitrária ou lixo de memória, causando comportamento impredizível, corrupção de dados ou crash.

Example

Uma função aloca memória para uma estrutura, mas em um caminho de execução esquece de inicializar um ponteiro dentro dela. Quando outra parte do código tenta usar esse ponteiro, ele aponta para lixo de memória, causando leitura ou escrita em endereços inválidos.

How to mitigate

Sempre inicialize ponteiros explicitamente no ponto de declaração (com NULL ou um endereço válido) e valide antes de usar. Use ferramentas de análise estática (Clang Static Analyzer, Valgrind) e, em linguagens modernas, prefira gerenciamento automático de memória ou smart pointers ao invés de ponteiros brutos.

CVE-2026-6778MEDIUMInvalid pointer in the Audio/Video: Playback componentEPSS 0.3%CVE-2022-39147—A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), EPSS 0.3%CVE-2022-39146—A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), EPSS 0.3%CVE-2026-21275HIGHInDesign Desktop | Access of Uninitialized Pointer (CWE-824)EPSS 0.3%CVE-2026-21276HIGHInDesign Desktop | Access of Uninitialized Pointer (CWE-824)EPSS 0.3%CVE-2022-31599HIGHNVIDIA DGX A100 contains a vulnerability in SBIOS in the Ofbd, where a local user with elevated privileges can cause access to an uninitialiEPSS 0.2%CVE-2021-41201HIGHUnitialized access in `EinsumHelper::ParseEquation`EPSS 0.2%CVE-2025-2530HIGHLuxion KeyShot DAE File Parsing Access of Uninitialized Pointer Remote Code Execution VulnerabilityEPSS 0.2%CVE-2022-2952HIGHGE CIMPLICITY Access of Uninitialized PointerEPSS 0.2%CVE-2022-3084HIGHGE CIMPLICITY Access of Uninitialized PointerEPSS 0.2%CVE-2026-110602MEDIUMlibmspack through 0.11alpha Uninitialized Pointer Free via kwajd_open Error PathEPSS 0.2%CVE-2025-47121HIGHAdobe Framemaker | Access of Uninitialized Pointer (CWE-824)EPSS 0.2%CVE-2025-47098HIGHInCopy | Access of Uninitialized Pointer (CWE-824)EPSS 0.2%CVE-2022-21156MEDIUMAccess of uninitialized pointer in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentEPSS 0.2%CVE-2023-31244HIGH The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then aEPSS 0.2%CVE-2025-9274HIGHOxford Instruments Imaris Viewer IMS File Parsing Uninitialized Pointer Remote Code Execution VulnerabilityEPSS 0.2%CVE-2023-24978HIGHA vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to unEPSS 0.2%CVE-2023-25007HIGHA malicious actor may convince a user to open a malicious USD file that may trigger an uninitialized pointer which could result in code execEPSS 0.2%CVE-2021-41214HIGHReference binding to `nullptr` in `tf.ragged.cross`EPSS 0.2%CVE-2023-24561HIGHA vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The EPSS 0.2%