Fallos del tipo CWE-476

2572 resultados

Desreferência de ponteiro nulo autenticada remota

A aplicação tenta acessar um objeto ou endereço de memória que não foi inicializado ou foi definido como nulo, sem verificar essa condição antes. Um atacante autenticado consegue provocar esse acesso inválido enviando dados malformados ou inesperados, causando crash ou comportamento indefinido.

Ejemplo

Um endpoint autenticado de API recebe um ID de usuário, faz uma busca no banco que retorna nulo (usuário não existe) e tenta acessar diretamente campos desse objeto nulo sem validação — resultando em erro 500 ou travamento da aplicação.

Cómo mitigar

Sempre verificar se um objeto é nulo antes de usá-lo; usar análise estática (linters, SAST) para detectar acessos potenciais a nulos; validar e tratar casos onde dados esperados podem estar ausentes, mesmo que o usuário esteja autenticado.

CVE-2023-25665HIGHTensorFlow has Null Pointer Error in SparseSparseMaximumEPSS 0.4%CVE-2022-1263—A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allows an unprivileged loEPSS 0.4%CVE-2024-24442HIGHA NULL pointer dereference in the ngap_app::handle_receive routine of OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.0.0 allows attackersEPSS 0.4%CVE-2025-66769HIGHA NULL pointer dereference in Nitro PDF Pro for Windows v14.41.1.4 allows attackers to cause a Denial of Service (DoS) via a crafted XFA pacEPSS 0.4%CVE-2025-64335HIGHSuricata is vulnerable to a null deref when used with base64_dataEPSS 0.4%CVE-2026-101939HIGHJunos OS and Junos OS Evolved: A routing-policy table reference causes routing-daemon denial of service when source-based forwarding is usedEPSS 0.4%CVE-2026-101940HIGHJunos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP ISO-VPN egress protection is enabledEPSS 0.4%CVE-2026-101941HIGHJunos OS and Junos OS Evolved: An attacker causes an rpd crash when routing-policy resolution-map processing and policy event tracing are enabledEPSS 0.4%CVE-2026-31638HIGHrxrpc: Only put the call ref if one was acquiredEPSS 0.4%CVE-2025-50635HIGHA null pointer dereference vulnerability was discovered in Netis WF2780 v2.2.35445. The vulnerability exists in the FUN_0048a728 function ofEPSS 0.4%CVE-2024-41164HIGHBIG-IP MPTCP vulnerabilityEPSS 0.4%CVE-2025-62785MEDIUMWazuh fillData NULL pointer dereference causes analysisd crashEPSS 0.4%CVE-2024-54130CRITICALSegmentation Fault in `forwardBundle` Function of ION-DTN BPv7 When Destination EID is `dtn:none` (public)EPSS 0.4%CVE-2025-59386LOWQuTS heroEPSS 0.4%CVE-2025-65563HIGHA denial-of-service vulnerability exists in the omec-project UPF (component upf-epc/pfcpiface) up to at least version upf-epc-pfcpiface:2.1.EPSS 0.4%CVE-2025-66274MEDIUMQTS, QuTS heroEPSS 0.4%CVE-2026-45541HIGHESF-IDF: Remote Null Pointer Dereference in WebSocket ServerEPSS 0.4%CVE-2024-11148HIGHOpenBSD httpd(8) null dereferenceEPSS 0.4%CVE-2025-43967LOWlibheif before 1.19.6 has a NULL pointer dereference in ImageItem_Grid::get_decoder in image-items/grid.cc because a grid image can referencEPSS 0.4%CVE-2025-41414HIGHBIG-IP HTTP/2 vulnerabilityEPSS 0.4%