Falhas do tipo CWE-395

17 resultados

Desreferência de ponteiro nulo

Ocorre quando o código tenta acessar ou manipular um objeto através de um ponteiro que aponta para NULL, sem validar se o ponteiro é válido antes de usá-lo. Isso causa uma exceção (geralmente crash ou segmentation fault) que interrompe a execução do programa e pode ser explorada para causar negação de serviço.

Exemplo

Um aplicativo recebe um arquivo JSON malformado onde um campo obrigatório está ausente. O código tenta acessar uma propriedade desse objeto nulo sem verificar se ele existe primeiro, causando o travamento da aplicação.

Como mitigar

Sempre valide ponteiros e referências antes de usá-los, implementando verificações explícitas (if pointer != NULL) ou usando técnicas de programação defensiva como optional types. Em linguagens modernas, prefira tipos que explicitamente proíbem nulos (como non-nullable references em C# ou pattern matching em Rust).

CVE-2022-2832—A flaw was found in Blender 3.3.0. A null pointer dereference exists in source/blender/gpu/opengl/gl_backend.cc that may lead to loss of conEPSS 1.5%CVE-2025-15514HIGHOllama Multi-Modal Model Image Processing NULL Pointer DereferenceEPSS 0.7%CVE-2024-27658MEDIUMD-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_4484A8(). This vulnerability allows attackers to causEPSS 0.6%CVE-2024-27659MEDIUMD-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_42AF30(). This vulnerability allows attackers to causEPSS 0.6%CVE-2025-27466CRITICALMutiple vulnerabilities in the Viridian interfaceEPSS 0.4%CVE-2025-58142CRITICALMutiple vulnerabilities in the Viridian interfaceEPSS 0.4%CVE-2024-27661MEDIUMD-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_4484A8(). This vulnerability allows attackers to causEPSS 0.4%CVE-2024-27662MEDIUMD-Link DIR-823G A1V1.0.2B05 was discovered to contain a Null-pointer dereferences in sub_4110f4(). This vulnerability allows attackers to caEPSS 0.4%CVE-2023-48727LOWNULL pointer dereference in some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated user to potentially enable informEPSS 0.2%CVE-2023-41082MEDIUMNull pointer dereference for some Intel(R) CST software before version 2.1.10300 may allow an authenticated user to potentially enable deniaEPSS 0.2%CVE-2024-36275MEDIUMNULL pointer dereference in some Intel(R) Optane(TM) PMem Management software versions before CR_MGMT_02.00.00.4040, CR_MGMT_03.00.00.0499 mEPSS 0.2%CVE-2022-42879MEDIUMNULL pointer dereference in some Intel(R) Arc(TM) Control software before version 1.73.5335.2 may allow an authenticated user to potentiallyEPSS 0.2%CVE-2022-42878LOWNull pointer dereference for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an autEPSS 0.2%CVE-2023-25071MEDIUMNULL pointer dereference in some Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows Drviers before version 31.0.101.4255 may allow authEPSS 0.2%CVE-2024-28030LOWNULL pointer dereference in some Intel(R) VPL software before version 24.1.4 may allow an authenticated user to potentially enable denial ofEPSS 0.2%CVE-2022-29508MEDIUMNull pointer dereference in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalEPSS 0.2%CVE-2023-23904MEDIUMNULL pointer dereference in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of pEPSS 0.1%