Falhas do tipo CWE-824

227 resultados

Ponteiro não inicializado

Ocorre quando um código usa um ponteiro sem antes atribuir um endereço válido a ele, fazendo com que ele aponte para lixo de memória. Isso permite leitura ou escrita em áreas arbitrárias, causando crashes, vazamento de dados ou execução de código malicioso.

Exemplo

Um driver de kernel aloca uma estrutura dinamicamente, mas em certos caminhos de código pula a inicialização do campo ponteiro que deveria referenciar um buffer. Quando outra função desreferencia esse ponteiro, acessa memória inválida e pode causar privilege escalation.

Como mitigar

Sempre inicialize ponteiros no ponto de declaração (preferencialmente com NULL) ou logo após alocação. Use ferramentas de análise estática (scan de código) e inicializadores de memória em testes para detectar uso de ponteiros soltos antes de código chegar à produção.

CVE-2026-21275HIGHInDesign Desktop | Access of Uninitialized Pointer (CWE-824)EPSS 0.3%CVE-2026-21276HIGHInDesign Desktop | Access of Uninitialized Pointer (CWE-824)EPSS 0.3%CVE-2022-39147—A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), EPSS 0.3%CVE-2022-39146—A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), EPSS 0.3%CVE-2021-41201HIGHUnitialized access in `EinsumHelper::ParseEquation`EPSS 0.2%CVE-2022-31599HIGHNVIDIA DGX A100 contains a vulnerability in SBIOS in the Ofbd, where a local user with elevated privileges can cause access to an uninitialiEPSS 0.2%CVE-2025-2530HIGHLuxion KeyShot DAE File Parsing Access of Uninitialized Pointer Remote Code Execution VulnerabilityEPSS 0.2%CVE-2022-2952HIGHGE CIMPLICITY Access of Uninitialized PointerEPSS 0.2%CVE-2022-3084HIGHGE CIMPLICITY Access of Uninitialized PointerEPSS 0.2%CVE-2026-110602MEDIUMlibmspack through 0.11alpha Uninitialized Pointer Free via kwajd_open Error PathEPSS 0.2%CVE-2025-47121HIGHAdobe Framemaker | Access of Uninitialized Pointer (CWE-824)EPSS 0.2%CVE-2025-47098HIGHInCopy | Access of Uninitialized Pointer (CWE-824)EPSS 0.2%CVE-2022-21156MEDIUMAccess of uninitialized pointer in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentEPSS 0.2%CVE-2025-9274HIGHOxford Instruments Imaris Viewer IMS File Parsing Uninitialized Pointer Remote Code Execution VulnerabilityEPSS 0.2%CVE-2023-31244HIGH The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then aEPSS 0.2%CVE-2023-24978HIGHA vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to unEPSS 0.2%CVE-2023-25007HIGHA malicious actor may convince a user to open a malicious USD file that may trigger an uninitialized pointer which could result in code execEPSS 0.2%CVE-2023-24563HIGHA vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The EPSS 0.2%CVE-2023-24561HIGHA vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The EPSS 0.2%CVE-2023-24562HIGHA vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The EPSS 0.2%