Falhas do tipo CWE-822

247 resultados

Desreferência de ponteiro não confiável

Ocorre quando o código desreferencia um ponteiro cujo valor veio de uma fonte externa (entrada do usuário, rede, arquivo) sem validação prévia. Um atacante pode fornecer um endereço de memória inválido ou malicioso, causando crash, leitura de dados sensíveis ou execução de código arbitrário.

Exemplo

Um aplicativo recebe um offset de memória via requisição HTTP, converte para ponteiro e acessa dados sem verificar se o endereço é válido: int *ptr = (int *)user_input; int valor = *ptr;. O atacante fornece um endereço inválido ou que aponta para região protegida.

Como mitigar

Nunca confie em ponteiros ou endereços vindos de entrada externa. Se necessário, use estruturas de dados gerenciadas (arrays, listas), validação rigorosa de limites, ou isolamento via sandboxing. Em linguagens modernas (C++, Rust), prefira smart pointers e verificações em tempo de compilação.

CVE-2020-27259—Omron CX-OneEPSS 2.7%CVE-2018-19029—LCDS Laquis SCADA prior to version 4.1.0.4150 allows an attacker using a specially crafted project file to supply a pointer for a controlledEPSS 2.7%CVE-2021-22649—Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1EPSS 2.2%CVE-2020-27277—Delta Electronics DOPSoft Version 4.0.8.21 and prior has a null pointer dereference issue while processing project files, which may allow anEPSS 2.2%CVE-2017-16728—An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple vulnerabilities that EPSS 2.1%CVE-2024-20680MEDIUMWindows Message Queuing Client (MSMQC) Information DisclosureEPSS 2.0%CVE-2023-36596HIGHRemote Procedure Call Information Disclosure VulnerabilityEPSS 2.0%CVE-2021-27496—Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior EPSS 2.0%CVE-2024-20664MEDIUMMicrosoft Message Queuing Information Disclosure VulnerabilityEPSS 2.0%CVE-2024-30090HIGHMicrosoft Streaming Service Elevation of Privilege VulnerabilityEPSS 2.0%CVE-2023-21677HIGHWindows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityEPSS 2.0%CVE-2024-20663MEDIUMWindows Message Queuing Client (MSMQC) Information DisclosureEPSS 1.9%CVE-2020-27289—Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a null pointer dereference issue while processing project files, which may allow EPSS 1.9%CVE-2024-43624HIGHWindows Hyper-V Shared Virtual Disk Elevation of Privilege VulnerabilityEPSS 1.8%CVE-2024-38104HIGHWindows Fax Service Remote Code Execution VulnerabilityEPSS 1.8%CVE-2025-60719HIGHWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityEPSS 1.8%CVE-2024-37339HIGHMicrosoft SQL Server Native Scoring Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-37340HIGHMicrosoft SQL Server Native Scoring Remote Code Execution VulnerabilityEPSS 1.6%CVE-2021-31504HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.3.84 (pEPSS 1.4%CVE-2021-31481HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User inEPSS 1.4%