Fallos del tipo CWE-395

17 resultados

Desreferenciação de ponteiro nulo

Ocorre quando o código tenta acessar ou manipular um ponteiro sem antes verificar se ele é nulo (NULL). Quando a desreferenciação acontece, o programa tenta ler ou escrever em um endereço de memória inválido, causando crash, negação de serviço ou, em alguns casos, comportamento imprevisível.

Ejemplo

Um servidor web recebe um JSON e tenta acessar uma propriedade aninhada sem validar se o objeto pai existe. Se o cliente enviar um JSON malformado, o ponteiro será nulo e o programa quebrará quando tentar acessar o campo filho.

Cómo mitigar

Sempre verificar se um ponteiro é nulo antes de usá-lo (if (ptr != NULL) ou if (ptr) em C/C++). Em linguagens mais modernas como Java ou C#, usar null checks ou mecanismos como Optional (Java) e nullable reference types (C#) para forçar validações em tempo de compilação.

CVE-2022-2832—A flaw was found in Blender 3.3.0. A null pointer dereference exists in source/blender/gpu/opengl/gl_backend.cc that may lead to loss of conEPSS 1.5%CVE-2025-15514HIGHOllama Multi-Modal Model Image Processing NULL Pointer DereferenceEPSS 0.7%CVE-2024-27658MEDIUMD-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_4484A8(). This vulnerability allows attackers to causEPSS 0.6%CVE-2024-27659MEDIUMD-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_42AF30(). This vulnerability allows attackers to causEPSS 0.6%CVE-2025-27466CRITICALMutiple vulnerabilities in the Viridian interfaceEPSS 0.4%CVE-2025-58142CRITICALMutiple vulnerabilities in the Viridian interfaceEPSS 0.4%CVE-2024-27661MEDIUMD-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_4484A8(). This vulnerability allows attackers to causEPSS 0.4%CVE-2024-27662MEDIUMD-Link DIR-823G A1V1.0.2B05 was discovered to contain a Null-pointer dereferences in sub_4110f4(). This vulnerability allows attackers to caEPSS 0.4%CVE-2023-48727LOWNULL pointer dereference in some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated user to potentially enable informEPSS 0.2%CVE-2023-41082MEDIUMNull pointer dereference for some Intel(R) CST software before version 2.1.10300 may allow an authenticated user to potentially enable deniaEPSS 0.2%CVE-2024-36275MEDIUMNULL pointer dereference in some Intel(R) Optane(TM) PMem Management software versions before CR_MGMT_02.00.00.4040, CR_MGMT_03.00.00.0499 mEPSS 0.2%CVE-2022-42879MEDIUMNULL pointer dereference in some Intel(R) Arc(TM) Control software before version 1.73.5335.2 may allow an authenticated user to potentiallyEPSS 0.2%CVE-2022-42878LOWNull pointer dereference for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an autEPSS 0.2%CVE-2023-25071MEDIUMNULL pointer dereference in some Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows Drviers before version 31.0.101.4255 may allow authEPSS 0.2%CVE-2024-28030LOWNULL pointer dereference in some Intel(R) VPL software before version 24.1.4 may allow an authenticated user to potentially enable denial ofEPSS 0.2%CVE-2022-29508MEDIUMNull pointer dereference in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalEPSS 0.2%CVE-2023-23904MEDIUMNULL pointer dereference in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of pEPSS 0.1%