Fallos del tipo CWE-824

208 resultados

Ponteiro não inicializado

Ocorre quando um ponteiro é declarado mas nunca recebe um endereço de memória válido antes de ser dereferenciado (acessado). O código tenta ler ou escrever em um endereço aleatório da memória, causando comportamento imprevisível: crash, corrupção de dados ou execução de código arbitrário.

Ejemplo

Um desenvolvedora declara `int *ptr;` em C, depois tenta acessar `*ptr = 42;` sem antes fazer `ptr = malloc(sizeof(int))` ou `ptr = &alguma_variavel;`. O programa escreve em um endereço lixo, quebrando algo na memória ou disparando uma violação de segmentação.

Cómo mitigar

Sempre inicialize ponteiros antes de usar: atribua um endereço válido (alocação dinâmica, referência a variável, ou NULL) no mesmo ponto da declaração. Use ferramentas estáticas (clang-analyzer, valgrind) para detectar casos antes do runtime. Em C++/Rust, prefira smart pointers ou referências, que forçam inicialização.

CVE-2023-38246HIGHAdobe Acrobat Reader DC ActiveX Control (AxAcroPDFLib.AxAcroPDF) stack-based stale pointer vulnerabilityEPSS 0.4%CVE-2024-24449MEDIUMAn uninitialized pointer dereference in the NasPdu::NasPdu component of OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a DEPSS 0.4%CVE-2023-35715HIGHAshlar-Vellum Cobalt AR File Parsing Uninitialized Memory Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-35713HIGHAshlar-Vellum Cobalt XE File Parsing Uninitialized Memory Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-34272HIGHFatek Automation FvDesigner FPJ File Parsing Uninitialized Pointer Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-35712HIGHAshlar-Vellum Cobalt XE File Parsing Uninitialized Memory Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-34263HIGHFatek Automation FvDesigner FPJ File Parsing Uninitialized Pointer Remote Code Execution VulnerabilityEPSS 0.4%CVE-2022-34244MEDIUMAdobe Photoshop U3D File Parsing Access of Uninitialized Pointer Information Disclosure VulnerabilityEPSS 0.4%CVE-2022-42895MEDIUMInfo Leak in l2cap_core in the Linux KernelEPSS 0.4%CVE-2025-26599HIGHXorg: xwayland: use of uninitialized pointer in compredirectwindow()EPSS 0.4%CVE-2026-2805CRITICALInvalid pointer in the DOM: Core & HTML componentEPSS 0.4%CVE-2026-6749HIGHInformation disclosure due to uninitialized memory in the Graphics: Canvas2D componentEPSS 0.4%CVE-2026-6748CRITICALUninitialized memory in the Audio/Video: Web Codecs componentEPSS 0.4%CVE-2023-47072LOWZDI-CAN-21790: Adobe After Effects MP4 File Uninitialized Variable Information Disclosure VulnerabilityEPSS 0.4%CVE-2024-47411HIGHAnimate | Access of Uninitialized Pointer (CWE-824)EPSS 0.4%CVE-2025-59478HIGHBIG-IP AFM DoS protection profile vulnerabilityEPSS 0.4%CVE-2023-47044MEDIUMZDI-CAN-21789: Adobe Media Encoder MP4 File Uninitialized Variable Information Disclosure VulnerabilityEPSS 0.4%CVE-2023-44362MEDIUMZDI-CAN-21791: Adobe Prelude MP4 File Uninitialized Variable Information Disclosure VulnerabilityEPSS 0.4%CVE-2023-44329MEDIUMZDI-CAN-21798: Adobe Bridge MP4 File Parsing Uninitialized Variable Information Disclosure VulnerabilityEPSS 0.4%CVE-2023-44327MEDIUMZDI-CAN-21793: Adobe Bridge MP4 File Uninitialized Variable Information Disclosure VulnerabilityEPSS 0.4%