Falhas do tipo CWE-476

2.572 resultados

Desreferenciação de ponteiro nulo autenticado

O software permite que um usuário autenticado force a desreferenciação de um ponteiro ou referência nula, tipicamente ao passar valores inesperados ou inválidos a uma função. O aplicativo não valida adequadamente a entrada antes de usá-la, causando falha (crash) ou comportamento indefinido que pode levar a negação de serviço.

Exemplo

Um painel administrativo aceita um ID de usuário para deletar, mas não verifica se esse ID existe no banco antes de acessar seus atributos. Um admin autenticado passa ID=0 ou um valor que não corresponde a nenhum registro, e o código tenta acessar propriedades de um objeto nulo, derrubando a aplicação.

Como mitigar

Sempre valide e verifique que referências/ponteiros são válidos antes de desreferenciar: teste se o objeto existe, se o ID é válido e se está dentro do escopo esperado. Use assertions em desenvolvimento e tratamento de exceções robusto em produção para falhas inesperadas.

CVE-2025-61105HIGHFRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_link_info function at ospf_extEPSS 0.5%CVE-2025-61101HIGHFRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_rmt_itf_addr functionEPSS 0.5%CVE-2022-0617—A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers udf_file_write_iter funEPSS 0.5%CVE-2025-61100HIGHFRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the ospf_opaque_lsa_dump function at ospf_oEPSS 0.5%CVE-2025-61102HIGHFRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_adj_sid function at oEPSS 0.5%CVE-2026-13065HIGHMongoDB $linearFill Window Function Improper Input Validation Leading to Process TerminationEPSS 0.5%CVE-2025-61099HIGHFRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the opaque_info_detail function at ospf_opaEPSS 0.5%CVE-2025-53412LOWFile Station 5EPSS 0.5%CVE-2025-45331HIGHbrplot v420.69.1 contains a Null Pointer Dereference (NPD) vulnerability in the br_dagens_handle_once function of its data processing moduleEPSS 0.5%CVE-2024-11706MEDIUMA null pointer dereference may have inadvertently occurred in `pk12util`, and specifically in the `SEC_ASN1DecodeItem_Util` function, when hEPSS 0.5%CVE-2024-36982HIGHDenial of Service through null pointer reference in “cluster/config” REST endpointEPSS 0.5%CVE-2025-45835HIGHA null pointer dereference vulnerability was discovered in Netis WF2880 v2.1.40207. The vulnerability exists in the FUN_004904c8 function ofEPSS 0.5%CVE-2024-45969HIGHNULL pointer dereference in the MMS Client in MZ Automation LibIEC1850 before commit 7afa40390b26ad1f4cf93deaa0052fe7e357ef33 allows a malicEPSS 0.5%CVE-2022-3153MEDIUMNULL Pointer Dereference in vim/vimEPSS 0.5%CVE-2026-68385CRITICALs390/checksum: Fix csum_partial() without vector facilityEPSS 0.5%CVE-2026-16702MEDIUMIBM® Db2® federated server could allow a remote authenticated attacker to cause a denial of service due to a null pointer dereferenceEPSS 0.5%CVE-2026-53184HIGHudp: clear skb->dev before running a sockmap verdictEPSS 0.5%CVE-2026-46024HIGHlibceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply()EPSS 0.5%CVE-2023-53335HIGHRDMA/cxgb4: Fix potential null-ptr-deref in pass_establish()EPSS 0.5%CVE-2026-26449HIGHIn Stomper 5e2741e when a client sends a SEND frame missing the destination header field, the server triggers a null pointer dereference (orEPSS 0.5%