Falhas do tipo CWE-476

2.572 resultados

Desreferenciação de ponteiro nulo autenticado

O software permite que um usuário autenticado force a desreferenciação de um ponteiro ou referência nula, tipicamente ao passar valores inesperados ou inválidos a uma função. O aplicativo não valida adequadamente a entrada antes de usá-la, causando falha (crash) ou comportamento indefinido que pode levar a negação de serviço.

Exemplo

Um painel administrativo aceita um ID de usuário para deletar, mas não verifica se esse ID existe no banco antes de acessar seus atributos. Um admin autenticado passa ID=0 ou um valor que não corresponde a nenhum registro, e o código tenta acessar propriedades de um objeto nulo, derrubando a aplicação.

Como mitigar

Sempre valide e verifique que referências/ponteiros são válidos antes de desreferenciar: teste se o objeto existe, se o ID é válido e se está dentro do escopo esperado. Use assertions em desenvolvimento e tratamento de exceções robusto em produção para falhas inesperadas.

CVE-2026-29169HIGHApache HTTP Server: mod_dav_lock indirect lock crashEPSS 0.6%CVE-2025-8183HIGHNULL Pointer Dereference in µD3TNEPSS 0.6%CVE-2026-112392HIGHPillow: NULL dereference in ImagingExpand via rank filters on zero-size imagesEPSS 0.6%CVE-2025-69252MEDIUMfree5GC has Null Pointer Dereference in UDM, Leading to Service PanicEPSS 0.6%CVE-2023-33307MEDIUMA null pointer dereference in Fortinet FortiOS before 7.2.5 and before 7.0.11, FortiProxy before 7.2.3 and before 7.0.9 allows attacker to dEPSS 0.6%CVE-2024-44856HIGHOpen Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component naEPSS 0.6%CVE-2024-44855HIGHOpen Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component naEPSS 0.6%CVE-2024-44854HIGHOpen Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component smEPSS 0.6%CVE-2024-44853HIGHOpen Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component coEPSS 0.6%CVE-2026-72035HIGHnet/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peekedEPSS 0.6%CVE-2026-43441HIGHnet: bonding: Fix nd_tbl NULL dereference when IPv6 is disabledEPSS 0.6%CVE-2025-59836MEDIUMOmni is Vulnerable to DoS via Empty Create/Update Resource RequestsEPSS 0.6%CVE-2024-42491MEDIUMA malformed Contact or Record-Route URI in an incoming SIP request can cause Asterisk to crash when res_resolver_unbound is usedEPSS 0.6%CVE-2026-82821MEDIUMFLVMeta AMF Object Parsing amf.c amf_object_get null pointer dereferenceEPSS 0.6%CVE-2026-52998HIGHnetfilter: nfnetlink_osf: fix potential NULL dereference in ttl checkEPSS 0.6%CVE-2024-0209HIGHNULL Pointer Dereference in WiresharkEPSS 0.6%CVE-2026-64545HIGHnet, bpf: check master for NULL in xdp_master_redirect()EPSS 0.6%CVE-2024-46922HIGHAn issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The absence of a null check leads to a Denial of Service at amdgpuEPSS 0.6%CVE-2023-6603HIGHFfmpeg: null pointer dereference in ffmpeg hls parsingEPSS 0.6%CVE-2026-20221MEDIUMMultiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service VulnerabilitiesEPSS 0.6%