Falhas do tipo CWE-824

220 resultados

Ponteiro não inicializado

Ocorre quando um código usa um ponteiro sem antes atribuir um endereço válido a ele, fazendo com que ele aponte para lixo de memória. Isso permite leitura ou escrita em áreas arbitrárias, causando crashes, vazamento de dados ou execução de código malicioso.

Exemplo

Um driver de kernel aloca uma estrutura dinamicamente, mas em certos caminhos de código pula a inicialização do campo ponteiro que deveria referenciar um buffer. Quando outra função desreferencia esse ponteiro, acessa memória inválida e pode causar privilege escalation.

Como mitigar

Sempre inicialize ponteiros no ponto de declaração (preferencialmente com NULL) ou logo após alocação. Use ferramentas de análise estática (scan de código) e inicializadores de memória em testes para detectar uso de ponteiros soltos antes de código chegar à produção.

CVE-2026-16409HIGHInvalid pointer in the Security: PSM componentEPSS 0.5%CVE-2026-6757MEDIUMInvalid pointer in the JavaScript: WebAssembly componentEPSS 0.5%CVE-2022-42895MEDIUMInfo Leak in l2cap_core in the Linux KernelEPSS 0.5%CVE-2023-38246HIGHAdobe Acrobat Reader DC ActiveX Control (AxAcroPDFLib.AxAcroPDF) stack-based stale pointer vulnerabilityEPSS 0.5%CVE-2024-24449MEDIUMAn uninitialized pointer dereference in the NasPdu::NasPdu component of OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a DEPSS 0.5%CVE-2025-27158HIGHAcrobat Reader | Access of Uninitialized Pointer (CWE-824)EPSS 0.4%CVE-2021-0209MEDIUMJunos OS Evolved: Receipt of certain valid BGP update packets from BGP peers may cause RPD to core when using REGEX.EPSS 0.4%CVE-2022-1016—A flaw was found in the Linux kernel in net/netfilter/nf_tables_core.c:nft_do_chain, which can cause a use-after-free. This issue needs to hEPSS 0.4%CVE-2024-45155HIGHAnimate | Access of Uninitialized Pointer (CWE-824)EPSS 0.4%CVE-2023-35715HIGHAshlar-Vellum Cobalt AR File Parsing Uninitialized Memory Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-35713HIGHAshlar-Vellum Cobalt XE File Parsing Uninitialized Memory Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-34272HIGHFatek Automation FvDesigner FPJ File Parsing Uninitialized Pointer Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-35712HIGHAshlar-Vellum Cobalt XE File Parsing Uninitialized Memory Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-34263HIGHFatek Automation FvDesigner FPJ File Parsing Uninitialized Pointer Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-100788CRITICALInvalid pointer in the JavaScript: WebAssembly componentEPSS 0.4%CVE-2022-34244MEDIUMAdobe Photoshop U3D File Parsing Access of Uninitialized Pointer Information Disclosure VulnerabilityEPSS 0.4%CVE-2025-26599HIGHXorg: xwayland: use of uninitialized pointer in compredirectwindow()EPSS 0.4%CVE-2026-6749HIGHInformation disclosure due to uninitialized memory in the Graphics: Canvas2D componentEPSS 0.4%CVE-2026-6748CRITICALUninitialized memory in the Audio/Video: Web Codecs componentEPSS 0.4%CVE-2026-94018HIGHNetX Duo Web HTTP server releases an uninitialized packet pointer on the PUT Content-Length underflow pathEPSS 0.4%