Weaknesses of type CWE-822

213 results

Desreferência de ponteiro não validado

O código desreferencia um ponteiro sem verificar se ele é válido, nulo ou aponta para memória acessível. Isso ocorre quando dados externos (entrada do usuário, rede, arquivo) são usados diretamente como endereço de memória, permitindo leitura ou escrita em regiões arbitrárias e causando crash, vazamento de dados ou execução de código.

Example

Uma aplicação C recebe um endereço de memória em JSON enviado pelo cliente e o usa diretamente: `int *ptr = (int*)json_value; printf("%d", *ptr);`. Um atacante envia um endereço inválido ou privilégio elevado, causando acesso à memória inacessível ou leitura de dados sensíveis.

How to mitigate

Nunca confie em ponteiros vindos de entrada externa. Use referências indiretas seguras (índices de array, handles opacos, offsets validados) em vez de ponteiros brutos. Sempre valide endereços antes de desreferenciar e implemente verificações de limites e proteções como ASLR e DEP no sistema operacional.

CVE-2025-55677HIGHWindows Device Association Broker Service Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2025-59207HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2025-60713HIGHWindows Routing and Remote Access Service (RRAS) Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2022-20796MEDIUMClamAV Truncated File Denial of Service Vulnerability Affecting Cisco Products: April 2022EPSS 0.4%CVE-2025-47982HIGHWindows Storage VSP Driver Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2026-45645HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-45643HIGHMicrosoft Word Remote Code Execution VulnerabilityEPSS 0.4%CVE-2025-47985HIGHWindows Event Tracing Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2022-42396HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is reEPSS 0.4%CVE-2025-49661HIGHWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2026-44805MEDIUMWindows Network Controller (NC) Host Agent Denial of Service VulnerabilityEPSS 0.4%CVE-2025-55230HIGHWindows MBT Transport Driver Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-55138MEDIUMMicrosoft Excel Information Disclosure VulnerabilityEPSS 0.3%CVE-2025-1255HIGHUntrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation.EPSS 0.3%CVE-2025-4993HIGHUntrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation.EPSS 0.3%CVE-2025-58749LOWWAMR runtime hangs or crashes with large memory.fill addresses in LLVM-JIT modeEPSS 0.3%CVE-2018-7525—In Omron CX-Supervisor Versions 3.30 and prior, processing a malformed packet by a certain executable may cause an untrusted pointer dereferEPSS 0.3%CVE-2023-39501HIGHPDF-XChange Editor OXPS File Parsing Untrusted Pointer Dereference Remote Code Execution VulnerabilityEPSS 0.3%CVE-2023-40471HIGHPDF-XChange Editor App Untrusted Pointer Dereference Remote Code Execution VulnerabilityEPSS 0.3%CVE-2023-40472HIGHPDF-XChange Editor JavaScript String Untrusted Pointer Dereference Remote Code Execution VulnerabilityEPSS 0.3%