Fallos del tipo CWE-476

2572 resultados

Desreferência de ponteiro nulo autenticada remota

A aplicação tenta acessar um objeto ou endereço de memória que não foi inicializado ou foi definido como nulo, sem verificar essa condição antes. Um atacante autenticado consegue provocar esse acesso inválido enviando dados malformados ou inesperados, causando crash ou comportamento indefinido.

Ejemplo

Um endpoint autenticado de API recebe um ID de usuário, faz uma busca no banco que retorna nulo (usuário não existe) e tenta acessar diretamente campos desse objeto nulo sem validação — resultando em erro 500 ou travamento da aplicação.

Cómo mitigar

Sempre verificar se um objeto é nulo antes de usá-lo; usar análise estática (linters, SAST) para detectar acessos potenciais a nulos; validar e tratar casos onde dados esperados podem estar ausentes, mesmo que o usuário esteja autenticado.

CVE-2026-100348MEDIUMkin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS)EPSS 0.4%CVE-2025-22921MEDIUMFFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a segmentation violation via the component /libavcodec/jpeg2000dec.c.EPSS 0.4%CVE-2019-16230MEDIUMdrivers/gpu/drm/radeon/radeon_display.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointeEPSS 0.4%CVE-2026-21485HIGHiccDEV Undefined Behavior (UB) and Out of Memory in CIccProfile::LoadTag()EPSS 0.4%CVE-2024-56430LOWOpenFHE through 1.2.3 has a NULL pointer dereference in BinFHEContext::EvalFloor in lib/binfhe-base-scheme.cpp.EPSS 0.4%CVE-2025-45332HIGHvkoskiv c-ray 1.1 contains a Null Pointer Dereference (NPD) vulnerability in the parse_mtllib function of its data processing module, leadinEPSS 0.4%CVE-2023-1186LOWFabulaTech Webcam for Remote Desktop IOCTL ftwebcam.sys 0x222018 null pointer dereferenceEPSS 0.4%CVE-2025-56363MEDIUMA null pointer dereference vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, affecting the ReadRevisionAttribute functiEPSS 0.4%CVE-2022-1201HIGHNULL Pointer Dereference in mrb_vm_exec with super in mruby/mrubyEPSS 0.4%CVE-2026-6666MEDIUMPgBouncer crash in kill_pool_logins_server_errorEPSS 0.4%CVE-2026-21688HIGHiccDEV has Type Confusion in SIccCalcOp::ArgsPushed() at IccProfLib/IccMpeCalc.cppEPSS 0.4%CVE-2026-102086HIGHJunos OS: SRX Series: Multiple DNS queries processed by SecIntel and DGA in the same session cause a flowd crashEPSS 0.4%CVE-2026-76492HIGHCisco Expressway Series Software Hardening Release: October 2026 - NULL Pointer VulnerabilitiesEPSS 0.4%CVE-2026-17539MEDIUMRTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short intervals, may cause a NULL pointer dereference EPSS 0.4%CVE-2024-44101HIGHthere is a possible Null Pointer Dereference (modem crash) due to improper input validation. This could lead to remote denial of service witEPSS 0.4%CVE-2024-27229HIGHIn ss_SendCallBarringPwdRequiredIndMsg of ss_CallBarring.c, there is a possible null pointer deref due to a missing null check. This could lEPSS 0.4%CVE-2026-79590MEDIUMA NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted RuEPSS 0.4%CVE-2026-32216MEDIUMWindows Redirected Drive Buffering System Denial of Service VulnerabilityEPSS 0.4%CVE-2025-52585HIGHBIG-IP Client SSL profile vulnerabilityEPSS 0.4%CVE-2020-25639—A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way thEPSS 0.4%