Fallos del tipo CWE-476

2331 resultados

Desreferência de ponteiro nulo autenticada remota

A aplicação tenta acessar um objeto ou endereço de memória que não foi inicializado ou foi definido como nulo, sem verificar essa condição antes. Um atacante autenticado consegue provocar esse acesso inválido enviando dados malformados ou inesperados, causando crash ou comportamento indefinido.

Ejemplo

Um endpoint autenticado de API recebe um ID de usuário, faz uma busca no banco que retorna nulo (usuário não existe) e tenta acessar diretamente campos desse objeto nulo sem validação — resultando em erro 500 ou travamento da aplicação.

Cómo mitigar

Sempre verificar se um objeto é nulo antes de usá-lo; usar análise estática (linters, SAST) para detectar acessos potenciais a nulos; validar e tratar casos onde dados esperados podem estar ausentes, mesmo que o usuário esteja autenticado.

CVE-2022-3116HIGHThe Heimdal Software Kerberos 5 implementation is vulnerable to a null pointer dereferance. An attacker with network access to an applicatioEPSS 0.9%CVE-2022-1507MEDIUMchafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a denial of service (crash) via a crafted input file. in hpjansson/chafaEPSS 0.9%CVE-2026-65681HIGHWindows iSCSI Target Service Denial of Service VulnerabilityEPSS 0.9%CVE-2026-28388HIGHNULL Pointer Dereference When Processing a Delta CRLEPSS 0.9%CVE-2026-26829HIGHA NULL pointer dereference in the safe_atou64 function (src/misc.c) of owntone-server through commit c4d57aa allows attackers to cause a DenEPSS 0.9%CVE-2025-36520HIGHA null pointer dereference vulnerability exists in the net_connectmsg Protocol Buffer Message functionality of Bloomberg Comdb2 8.1. A speciEPSS 0.9%CVE-2020-10602—In OSIsoft PI System multiple products and versions, an authenticated remote attacker could crash PI Network Manager due to a race conditionEPSS 0.9%CVE-2019-10207MEDIUMA flaw was found in the Linux kernel's Bluetooth implementation of UART, all versions kernel 3.x.x before 4.18.0 and kernel 5.x.x. An attackEPSS 0.9%CVE-2023-49275MEDIUMWazuh vulnerable to NULL Pointer Dereference in wazuh-analysisdEPSS 0.9%CVE-2021-3319MEDIUMDOS: Incorrect 802154 Frame Validation for Omitted Source / Dest AddressesEPSS 0.9%CVE-2024-10750HIGHTenda i22 SysToo websReadEvent null pointer dereferenceEPSS 0.9%CVE-2024-38536HIGHSuricata http/range: NULL-ptr deref when http.memcap is reachedEPSS 0.9%CVE-2024-26342HIGHA Null pointer dereference in usr/sbin/httpd in ASUS AC68U 3.0.0.4.384.82230 allows remote attackers to trigger DoS via network packet.EPSS 0.9%CVE-2024-47599MEDIUMGHSL-2024-247: GStreamer Insufficient error handling in JPEG decoder that can lead to NULL-pointer dereferencesEPSS 0.9%CVE-2024-47603MEDIUMGHSL-2024-251: GStreamer NULL-pointer dereference in Matroska/WebM demuxerEPSS 0.9%CVE-2024-47601MEDIUMGHSL-2024-249: GStreamer has a NULL-pointer dereference in Matroska/WebM demuxerEPSS 0.9%CVE-2023-42786MEDIUMA null pointer dereference in FortiOS versions 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0 all versions, 6.4 all versions , 6.2 all versioEPSS 0.9%CVE-2022-34761HIGHA CWE-476: NULL Pointer Dereference vulnerability exists that could cause a denial of service of the webserver when parsing JSON content typEPSS 0.9%CVE-2024-21664MEDIUMParsing JSON serialized payload without protected field can lead to segfaultEPSS 0.9%CVE-2025-62848HIGHQTS, QuTS heroEPSS 0.9%