Fallos del tipo CWE-824

208 resultados

Ponteiro não inicializado

Ocorre quando um ponteiro é declarado mas nunca recebe um endereço de memória válido antes de ser dereferenciado (acessado). O código tenta ler ou escrever em um endereço aleatório da memória, causando comportamento imprevisível: crash, corrupção de dados ou execução de código arbitrário.

Ejemplo

Um desenvolvedora declara `int *ptr;` em C, depois tenta acessar `*ptr = 42;` sem antes fazer `ptr = malloc(sizeof(int))` ou `ptr = &alguma_variavel;`. O programa escreve em um endereço lixo, quebrando algo na memória ou disparando uma violação de segmentação.

Cómo mitigar

Sempre inicialize ponteiros antes de usar: atribua um endereço válido (alocação dinâmica, referência a variável, ou NULL) no mesmo ponto da declaração. Use ferramentas estáticas (clang-analyzer, valgrind) para detectar casos antes do runtime. Em C++/Rust, prefira smart pointers ou referências, que forçam inicialização.

CVE-2023-24563HIGHA vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The EPSS 0.2%CVE-2021-41214HIGHReference binding to `nullptr` in `tf.ragged.cross`EPSS 0.2%CVE-2023-24562HIGHA vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The EPSS 0.2%CVE-2023-24561HIGHA vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The EPSS 0.2%CVE-2025-14739MEDIUMUninitialized Pointer Vulnerability in TP-Link WR940N and WR941NDEPSS 0.2%CVE-2024-50088HIGHbtrfs: fix uninitialized pointer free in add_inode_ref()EPSS 0.2%CVE-2024-50087HIGHbtrfs: fix uninitialized pointer free on read_alloc_one_name() errorEPSS 0.2%CVE-2026-54920NONEOpenEXR: Integer overflow and uninitialized pointer cause invalid delete in OpenEXRUtil image resizeEPSS 0.2%CVE-2021-41219HIGHUndefined behavior via `nullptr` reference binding in sparse matrix multiplicationEPSS 0.2%CVE-2024-8645MEDIUMAccess of Uninitialized Pointer in WiresharkEPSS 0.2%CVE-2023-49132HIGHA vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to uninitEPSS 0.2%CVE-2023-49131HIGHA vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to uninitEPSS 0.2%CVE-2023-49130HIGHA vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The affected application is vulnerable to uninitEPSS 0.2%CVE-2023-22366HIGHCX-Motion-MCH v2.32 and earlier contains an access of uninitialized pointer vulnerability. Having a user to open a specially crafted projectEPSS 0.2%CVE-2021-29568LOWReference binding to null in `ParameterizedTruncatedNormal`EPSS 0.2%CVE-2024-57943HIGHexfat: fix the new buffer was not zeroed before writingEPSS 0.2%CVE-2021-37662HIGHReference binding to nullptr in boosted trees in TensorFlowEPSS 0.2%CVE-2025-47121HIGHAdobe Framemaker | Access of Uninitialized Pointer (CWE-824)EPSS 0.2%CVE-2025-47098HIGHInCopy | Access of Uninitialized Pointer (CWE-824)EPSS 0.2%CVE-2023-20594—Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.EPSS 0.2%