Falhas do tipo CWE-476

2.332 resultados

Desreferenciação de ponteiro nulo autenticado

O software permite que um usuário autenticado force a desreferenciação de um ponteiro ou referência nula, tipicamente ao passar valores inesperados ou inválidos a uma função. O aplicativo não valida adequadamente a entrada antes de usá-la, causando falha (crash) ou comportamento indefinido que pode levar a negação de serviço.

Exemplo

Um painel administrativo aceita um ID de usuário para deletar, mas não verifica se esse ID existe no banco antes de acessar seus atributos. Um admin autenticado passa ID=0 ou um valor que não corresponde a nenhum registro, e o código tenta acessar propriedades de um objeto nulo, derrubando a aplicação.

Como mitigar

Sempre valide e verifique que referências/ponteiros são válidos antes de desreferenciar: teste se o objeto existe, se o ID é válido e se está dentro do escopo esperado. Use assertions em desenvolvimento e tratamento de exceções robusto em produção para falhas inesperadas.

CVE-2025-30267MEDIUMQTS, QuTS heroEPSS 0.4%CVE-2025-49686HIGHWindows TCP/IP Driver Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2026-78222HIGHNGINX ngx_http_js_module vulnerabilityEPSS 0.4%CVE-2025-22921MEDIUMFFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a segmentation violation via the component /libavcodec/jpeg2000dec.c.EPSS 0.4%CVE-2025-24251MEDIUMThe issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS SonoEPSS 0.4%CVE-2022-1201HIGHNULL Pointer Dereference in mrb_vm_exec with super in mruby/mrubyEPSS 0.4%CVE-2026-6666MEDIUMPgBouncer crash in kill_pool_logins_server_errorEPSS 0.4%CVE-2023-1186LOWFabulaTech Webcam for Remote Desktop IOCTL ftwebcam.sys 0x222018 null pointer dereferenceEPSS 0.4%CVE-2026-67304HIGHFreeRDP before 3.29.0 NULL Dereference via smartcard cleanupEPSS 0.4%CVE-2024-56430LOWOpenFHE through 1.2.3 has a NULL pointer dereference in BinFHEContext::EvalFloor in lib/binfhe-base-scheme.cpp.EPSS 0.4%CVE-2024-27229HIGHIn ss_SendCallBarringPwdRequiredIndMsg of ss_CallBarring.c, there is a possible null pointer deref due to a missing null check. This could lEPSS 0.4%CVE-2026-4652HIGHRemote denial of service via null pointer dereferenceEPSS 0.4%CVE-2024-44101HIGHthere is a possible Null Pointer Dereference (modem crash) due to improper input validation. This could lead to remote denial of service witEPSS 0.4%CVE-2020-25639—A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way thEPSS 0.4%CVE-2025-20755MEDIUMIn Modem, there is a possible application crash due to improper input validation. This could lead to remote denial of service, if a UE has cEPSS 0.4%CVE-2026-32216MEDIUMWindows Redirected Drive Buffering System Denial of Service VulnerabilityEPSS 0.4%CVE-2026-33283MEDIUMElla Core panics on malformed ULNASTransport Message without a Request TypeEPSS 0.4%CVE-2026-24411HIGHiccDEV has Undefined Behavior and Null Pointer Deference in CIccTagXmlSegmentedCurve::ToXml()EPSS 0.4%CVE-2026-92626HIGHControl iD iDSecure Unauthenticated Denial of ServiceEPSS 0.4%CVE-2025-20647MEDIUMIn Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connectedEPSS 0.4%