Weaknesses of type CWE-395

17 results

Desreferência de ponteiro nulo

Ocorre quando o código tenta acessar ou manipular um ponteiro que aponta para NULL (endereço zero), causando uma falha de segmentação (crash) ou comportamento indefinido. O erro acontece porque o desenvolvedor não valida se o ponteiro é válido antes de usá-lo, deixando o sistema vulnerável a negação de serviço ou, em casos específicos, a exploração maliciosa.

Example

Um serviço web recebe um objeto JSON, o parser tenta acessar um campo aninhado sem verificar se o objeto pai existe. Se o objeto pai for NULL, o acesso ao campo filho causa crash imediato do serviço.

How to mitigate

Sempre validar se um ponteiro ou referência não é NULL antes de desreferenciá-lo, usando verificações explícitas (if pointer != NULL) ou estruturas de tratamento de erro (try-catch, match em Rust). Em linguagens modernas, prefira tipos que forçam segurança (Optional, Result) ao invés de ponteiros nulos crus.

CVE-2022-2832—A flaw was found in Blender 3.3.0. A null pointer dereference exists in source/blender/gpu/opengl/gl_backend.cc that may lead to loss of conEPSS 1.5%CVE-2025-15514HIGHOllama Multi-Modal Model Image Processing NULL Pointer DereferenceEPSS 0.7%CVE-2024-27658MEDIUMD-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_4484A8(). This vulnerability allows attackers to causEPSS 0.6%CVE-2024-27659MEDIUMD-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_42AF30(). This vulnerability allows attackers to causEPSS 0.6%CVE-2025-27466CRITICALMutiple vulnerabilities in the Viridian interfaceEPSS 0.4%CVE-2025-58142CRITICALMutiple vulnerabilities in the Viridian interfaceEPSS 0.4%CVE-2024-27661MEDIUMD-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_4484A8(). This vulnerability allows attackers to causEPSS 0.4%CVE-2024-27662MEDIUMD-Link DIR-823G A1V1.0.2B05 was discovered to contain a Null-pointer dereferences in sub_4110f4(). This vulnerability allows attackers to caEPSS 0.4%CVE-2023-48727LOWNULL pointer dereference in some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated user to potentially enable informEPSS 0.2%CVE-2023-41082MEDIUMNull pointer dereference for some Intel(R) CST software before version 2.1.10300 may allow an authenticated user to potentially enable deniaEPSS 0.2%CVE-2024-36275MEDIUMNULL pointer dereference in some Intel(R) Optane(TM) PMem Management software versions before CR_MGMT_02.00.00.4040, CR_MGMT_03.00.00.0499 mEPSS 0.2%CVE-2022-42879MEDIUMNULL pointer dereference in some Intel(R) Arc(TM) Control software before version 1.73.5335.2 may allow an authenticated user to potentiallyEPSS 0.2%CVE-2022-42878LOWNull pointer dereference for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an autEPSS 0.2%CVE-2023-25071MEDIUMNULL pointer dereference in some Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows Drviers before version 31.0.101.4255 may allow authEPSS 0.2%CVE-2024-28030LOWNULL pointer dereference in some Intel(R) VPL software before version 24.1.4 may allow an authenticated user to potentially enable denial ofEPSS 0.2%CVE-2022-29508MEDIUMNull pointer dereference in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalEPSS 0.2%CVE-2023-23904MEDIUMNULL pointer dereference in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of pEPSS 0.1%