Fallos del tipo CWE-824

227 resultados

Ponteiro não inicializado

Ocorre quando um ponteiro é declarado mas nunca recebe um endereço de memória válido antes de ser dereferenciado (acessado). O código tenta ler ou escrever em um endereço aleatório da memória, causando comportamento imprevisível: crash, corrupção de dados ou execução de código arbitrário.

Ejemplo

Um desenvolvedora declara `int *ptr;` em C, depois tenta acessar `*ptr = 42;` sem antes fazer `ptr = malloc(sizeof(int))` ou `ptr = &alguma_variavel;`. O programa escreve em um endereço lixo, quebrando algo na memória ou disparando uma violação de segmentação.

Cómo mitigar

Sempre inicialize ponteiros antes de usar: atribua um endereço válido (alocação dinâmica, referência a variável, ou NULL) no mesmo ponto da declaração. Use ferramentas estáticas (clang-analyzer, valgrind) para detectar casos antes do runtime. Em C++/Rust, prefira smart pointers ou referências, que forçam inicialização.

CVE-2026-16409HIGHInvalid pointer in the Security: PSM componentEPSS 0.5%CVE-2026-16353CRITICALInvalid pointer in the DOM: Bindings (WebIDL) componentEPSS 0.5%CVE-2026-6757MEDIUMInvalid pointer in the JavaScript: WebAssembly componentEPSS 0.5%CVE-2022-42895MEDIUMInfo Leak in l2cap_core in the Linux KernelEPSS 0.5%CVE-2023-38246HIGHAdobe Acrobat Reader DC ActiveX Control (AxAcroPDFLib.AxAcroPDF) stack-based stale pointer vulnerabilityEPSS 0.5%CVE-2024-24449MEDIUMAn uninitialized pointer dereference in the NasPdu::NasPdu component of OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a DEPSS 0.5%CVE-2025-27158HIGHAcrobat Reader | Access of Uninitialized Pointer (CWE-824)EPSS 0.4%CVE-2021-0209MEDIUMJunos OS Evolved: Receipt of certain valid BGP update packets from BGP peers may cause RPD to core when using REGEX.EPSS 0.4%CVE-2022-1016—A flaw was found in the Linux kernel in net/netfilter/nf_tables_core.c:nft_do_chain, which can cause a use-after-free. This issue needs to hEPSS 0.4%CVE-2024-45155HIGHAnimate | Access of Uninitialized Pointer (CWE-824)EPSS 0.4%CVE-2023-35715HIGHAshlar-Vellum Cobalt AR File Parsing Uninitialized Memory Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-35713HIGHAshlar-Vellum Cobalt XE File Parsing Uninitialized Memory Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-35712HIGHAshlar-Vellum Cobalt XE File Parsing Uninitialized Memory Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-34263HIGHFatek Automation FvDesigner FPJ File Parsing Uninitialized Pointer Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-34272HIGHFatek Automation FvDesigner FPJ File Parsing Uninitialized Pointer Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-100788CRITICALInvalid pointer in the JavaScript: WebAssembly componentEPSS 0.4%CVE-2022-34244MEDIUMAdobe Photoshop U3D File Parsing Access of Uninitialized Pointer Information Disclosure VulnerabilityEPSS 0.4%CVE-2026-28691HIGHImageMagick has an uninitialized pointer dereference in JBIG decoderEPSS 0.4%CVE-2025-26599HIGHXorg: xwayland: use of uninitialized pointer in compredirectwindow()EPSS 0.4%CVE-2026-6749HIGHInformation disclosure due to uninitialized memory in the Graphics: Canvas2D componentEPSS 0.4%