Weaknesses of type CWE-822

216 results

Desreferência de ponteiro não validado

O código desreferencia um ponteiro sem verificar se ele é válido, nulo ou aponta para memória acessível. Isso ocorre quando dados externos (entrada do usuário, rede, arquivo) são usados diretamente como endereço de memória, permitindo leitura ou escrita em regiões arbitrárias e causando crash, vazamento de dados ou execução de código.

Example

Uma aplicação C recebe um endereço de memória em JSON enviado pelo cliente e o usa diretamente: `int *ptr = (int*)json_value; printf("%d", *ptr);`. Um atacante envia um endereço inválido ou privilégio elevado, causando acesso à memória inacessível ou leitura de dados sensíveis.

How to mitigate

Nunca confie em ponteiros vindos de entrada externa. Use referências indiretas seguras (índices de array, handles opacos, offsets validados) em vez de ponteiros brutos. Sempre valide endereços antes de desreferenciar e implemente verificações de limites e proteções como ASLR e DEP no sistema operacional.

CVE-2018-19029—LCDS Laquis SCADA prior to version 4.1.0.4150 allows an attacker using a specially crafted project file to supply a pointer for a controlledEPSS 2.7%CVE-2020-27277—Delta Electronics DOPSoft Version 4.0.8.21 and prior has a null pointer dereference issue while processing project files, which may allow anEPSS 2.2%CVE-2021-22649—Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1EPSS 2.2%CVE-2017-16728—An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple vulnerabilities that EPSS 2.1%CVE-2024-20680MEDIUMWindows Message Queuing Client (MSMQC) Information DisclosureEPSS 2.0%CVE-2023-36596HIGHRemote Procedure Call Information Disclosure VulnerabilityEPSS 2.0%CVE-2021-27496—Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior EPSS 2.0%CVE-2024-20664MEDIUMMicrosoft Message Queuing Information Disclosure VulnerabilityEPSS 2.0%CVE-2023-21677HIGHWindows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityEPSS 2.0%CVE-2024-30090HIGHMicrosoft Streaming Service Elevation of Privilege VulnerabilityEPSS 2.0%CVE-2024-20663MEDIUMWindows Message Queuing Client (MSMQC) Information DisclosureEPSS 1.9%CVE-2020-27289—Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a null pointer dereference issue while processing project files, which may allow EPSS 1.9%CVE-2024-38104HIGHWindows Fax Service Remote Code Execution VulnerabilityEPSS 1.8%CVE-2024-43624HIGHWindows Hyper-V Shared Virtual Disk Elevation of Privilege VulnerabilityEPSS 1.8%CVE-2025-60719HIGHWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityEPSS 1.8%CVE-2024-37339HIGHMicrosoft SQL Server Native Scoring Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-37340HIGHMicrosoft SQL Server Native Scoring Remote Code Execution VulnerabilityEPSS 1.6%CVE-2021-31481HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User inEPSS 1.4%CVE-2021-31504HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.3.84 (pEPSS 1.4%CVE-2021-31500HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User inEPSS 1.4%