Falhas do tipo CWE-824

208 resultados

Ponteiro não inicializado

Ocorre quando um código usa um ponteiro sem antes atribuir um endereço válido a ele, fazendo com que ele aponte para lixo de memória. Isso permite leitura ou escrita em áreas arbitrárias, causando crashes, vazamento de dados ou execução de código malicioso.

Exemplo

Um driver de kernel aloca uma estrutura dinamicamente, mas em certos caminhos de código pula a inicialização do campo ponteiro que deveria referenciar um buffer. Quando outra função desreferencia esse ponteiro, acessa memória inválida e pode causar privilege escalation.

Como mitigar

Sempre inicialize ponteiros no ponto de declaração (preferencialmente com NULL) ou logo após alocação. Use ferramentas de análise estática (scan de código) e inicializadores de memória em testes para detectar uso de ponteiros soltos antes de código chegar à produção.

CVE-2023-38246HIGHAdobe Acrobat Reader DC ActiveX Control (AxAcroPDFLib.AxAcroPDF) stack-based stale pointer vulnerabilityEPSS 0.4%CVE-2024-24449MEDIUMAn uninitialized pointer dereference in the NasPdu::NasPdu component of OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a DEPSS 0.4%CVE-2023-35715HIGHAshlar-Vellum Cobalt AR File Parsing Uninitialized Memory Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-35713HIGHAshlar-Vellum Cobalt XE File Parsing Uninitialized Memory Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-34272HIGHFatek Automation FvDesigner FPJ File Parsing Uninitialized Pointer Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-35712HIGHAshlar-Vellum Cobalt XE File Parsing Uninitialized Memory Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-34263HIGHFatek Automation FvDesigner FPJ File Parsing Uninitialized Pointer Remote Code Execution VulnerabilityEPSS 0.4%CVE-2022-34244MEDIUMAdobe Photoshop U3D File Parsing Access of Uninitialized Pointer Information Disclosure VulnerabilityEPSS 0.4%CVE-2022-42895MEDIUMInfo Leak in l2cap_core in the Linux KernelEPSS 0.4%CVE-2025-26599HIGHXorg: xwayland: use of uninitialized pointer in compredirectwindow()EPSS 0.4%CVE-2026-2805CRITICALInvalid pointer in the DOM: Core & HTML componentEPSS 0.4%CVE-2026-6749HIGHInformation disclosure due to uninitialized memory in the Graphics: Canvas2D componentEPSS 0.4%CVE-2026-6748CRITICALUninitialized memory in the Audio/Video: Web Codecs componentEPSS 0.4%CVE-2023-47072LOWZDI-CAN-21790: Adobe After Effects MP4 File Uninitialized Variable Information Disclosure VulnerabilityEPSS 0.4%CVE-2024-47411HIGHAnimate | Access of Uninitialized Pointer (CWE-824)EPSS 0.4%CVE-2025-59478HIGHBIG-IP AFM DoS protection profile vulnerabilityEPSS 0.4%CVE-2023-47044MEDIUMZDI-CAN-21789: Adobe Media Encoder MP4 File Uninitialized Variable Information Disclosure VulnerabilityEPSS 0.4%CVE-2023-44362MEDIUMZDI-CAN-21791: Adobe Prelude MP4 File Uninitialized Variable Information Disclosure VulnerabilityEPSS 0.4%CVE-2023-44329MEDIUMZDI-CAN-21798: Adobe Bridge MP4 File Parsing Uninitialized Variable Information Disclosure VulnerabilityEPSS 0.4%CVE-2023-44327MEDIUMZDI-CAN-21793: Adobe Bridge MP4 File Uninitialized Variable Information Disclosure VulnerabilityEPSS 0.4%