Fallos del tipo CWE-476

2568 resultados

Desreferência de ponteiro nulo autenticada remota

A aplicação tenta acessar um objeto ou endereço de memória que não foi inicializado ou foi definido como nulo, sem verificar essa condição antes. Um atacante autenticado consegue provocar esse acesso inválido enviando dados malformados ou inesperados, causando crash ou comportamento indefinido.

Ejemplo

Um endpoint autenticado de API recebe um ID de usuário, faz uma busca no banco que retorna nulo (usuário não existe) e tenta acessar diretamente campos desse objeto nulo sem validação — resultando em erro 500 ou travamento da aplicação.

Cómo mitigar

Sempre verificar se um objeto é nulo antes de usá-lo; usar análise estática (linters, SAST) para detectar acessos potenciais a nulos; validar e tratar casos onde dados esperados podem estar ausentes, mesmo que o usuário esteja autenticado.

CVE-2021-27607HIGHSAP NetWeaver ABAP Server and ABAP Platform (Dispatcher), versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.2EPSS 1.5%CVE-2019-13542—3S-Smart Software Solutions GmbH CODESYS V3 OPC UA Server, all versions 3.5.11.0 to 3.5.15.0, allows an attacker to send crafted requests frEPSS 1.5%CVE-2022-24736LOWA Malformed Lua script can crash RedisEPSS 1.5%CVE-2019-14874MEDIUMIn the __i2b function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate aEPSS 1.5%CVE-2019-14876MEDIUMIn the __lshift function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocatEPSS 1.5%CVE-2019-3840MEDIUMA NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU ageEPSS 1.5%CVE-2023-27787HIGHAn issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse_list function at the list.c:81 endpoinEPSS 1.5%CVE-2023-27786HIGHAn issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the macinstring function.EPSS 1.5%CVE-2023-27785HIGHAn issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse endpoints function.EPSS 1.5%CVE-2023-27784HIGHAn issue found in TCPReplay v.4.4.3 allows a remote attacker to cause a denial of service via the read_hexstring function at the utils.c:309EPSS 1.5%CVE-2016-9600—JasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded creation of JPEG 2000 image files. A speciEPSS 1.5%CVE-2023-6356MEDIUMKernel: null pointer dereference in nvmet_tcp_build_iovecEPSS 1.5%CVE-2019-14873MEDIUMIn the __multadd function of the newlib libc library, prior to versions 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate aEPSS 1.5%CVE-2019-14872MEDIUMThe _dtoa_r function of the newlib libc library, prior to version 3.3.0, performs multiple memory allocations without checking their return EPSS 1.5%CVE-2026-21243HIGHWindows Lightweight Directory Access Protocol (LDAP) Denial of Service VulnerabilityEPSS 1.4%CVE-2020-26213MEDIUMDenial of Service in telerEPSS 1.4%CVE-2021-43748MEDIUMAdobe Premiere Rush NULL Pointer Dereference Local Denial-of-ServiceEPSS 1.4%CVE-2021-42733MEDIUMAdobe Bridge NULL Pointer Dereference could lead to Application denial-of-serviceEPSS 1.4%CVE-2021-43749MEDIUMAdobe Premiere Rush NULL Pointer Dereference Local Denial-of-ServiceEPSS 1.4%CVE-2021-43750MEDIUMAdobe Premiere Rush NULL Pointer Dereference Local Denial-of-ServiceEPSS 1.4%