目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

CWE-476 空指针解引用 类漏洞列表 1557

CWE-476 空指针解引用 类弱点 1557 条 CVE 漏洞汇总，含 AI 中文分析。

CWE-476空指针解引用属于内存安全类漏洞，指程序在指针为NULL时仍尝试访问其指向的内存。攻击者通常通过构造特定输入触发空指针，导致程序崩溃引发拒绝服务，或在特定架构下利用该异常改变执行流以执行恶意代码。开发者应避免在解引用前未验证指针有效性，通过添加空值检查、使用静态分析工具检测潜在风险，并确保代码逻辑能妥善处理无效指针情况，从而从根本上消除隐患。

MITRE CWE 官方描述
CWE：CWE-476 NULL Pointer Dereference（空指针解引用） 英文：The product dereferences a pointer that it expects to be valid but is NULL. 译文：产品解引用了一个它预期为有效但实际上为 NULL 的指针。
常见影响 (2)
Availability DoS: Crash, Exit, or Restart
NULL pointer dereferences usually result in the failure of the process unless exception handling (on some platforms) is available and implemented. Even when exception handling is being used, it can still be very difficult to return the software to a safe state of operation.
Integrity, Confidentiality Execute Unauthorized Code or Commands, Read Memory, Modify Memory
In rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it, then writing or reading memory is possible, which may lead to code execution.
缓解措施 (5)
Implementation For any pointers that could have been modified or provided from a function that can return NULL, check the pointer for NULL before use. When working with a multithreaded or otherwise asynchronous environment, ensure that proper locking APIs are used to lock before the check, and unlock when it has finished [REF-1484].
Requirements Select a programming language that is not susceptible to these issues.
Implementation Check the results of all functions that return a value and verify that the value is non-null before acting upon it.
Effectiveness: Moderate
Architecture and Design Identify all variables and data stores that receive information from external sources, and apply input validation to make sure that they are only initialized to expected values.
Implementation Explicitly initialize all variables and other data stores, either during declaration or just before the first usage.
代码示例 (2)
This example takes an IP address from a user, verifies that it is well formed and then looks up the hostname and copies it into a buffer.
void host_lookup(char *user_supplied_addr){ struct hostent *hp; in_addr_t *addr; char hostname[64]; in_addr_t inet_addr(const char *cp); /*routine that ensures user_supplied_addr is in the right format for conversion */ validate_addr_form(user_supplied_addr); addr = inet_addr(user_supplied_addr); hp = gethostbyaddr( addr, sizeof(struct in_addr), AF_INET); strcpy(hostname, hp->h_name); }
Bad · C
In the following code, the programmer assumes that the system always has a property named "cmd" defined. If an attacker can control the program's environment so that "cmd" is not defined, the program throws a NULL pointer exception when it attempts to call the trim() method.
String cmd = System.getProperty("cmd"); cmd = cmd.trim();
Bad · Java
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-107890 CUPS漏洞：空指针解引用致服务崩溃 — CUPS 3.3 Low 2026-10-09
CVE-2026-107888 CUPS<2.4.20空指针解引用致服务终止 — CUPS 5.1 Medium 2026-10-09
CVE-2026-107733 SumatraPDF 无文档标签页时 CmdExec 空指针解引用漏洞 — sumatrapdf 6.8 Medium 2026-10-08
CVE-2026-107708 MIT krb5 1.22.2及之前版本 KDC S4U2Proxy PAC空指针解引用漏洞 — krb5 4.9 Medium 2026-10-08
CVE-2026-107778 MIT krb5 1.22.2 NULL指针解引用漏洞 — krb5 6.5 Medium 2026-10-08
CVE-2026-107613 TightVNC Server Win8ScreenDriver 空指针解引用漏洞 — TightVNC 5.9 Medium 2026-10-08
CVE-2026-16165 IBM DataPower Gateway空指针解引用漏洞 — DataPower Gateway 10.6CD 7.5 High 2026-10-08
CVE-2026-16182 IBM DataPower Gateway 空指针解引用漏洞 — DataPower Gateway 10.6CD 5.9 Medium 2026-10-08
CVE-2026-107213 Excelize GetSlicers空指针解引用漏洞 — excelize 8.7 High 2026-10-07
CVE-2026-107169 M17n-lib UTF-8 畸形处理空指针写入漏洞 — Red Hat Enterprise Linux 10 6.2 Medium 2026-10-07
CVE-2026-107170 M17n-lib minput_open_im 空指针解引用漏洞 — Red Hat Enterprise Linux 10 2.9 Low 2026-10-07
CVE-2026-102169 Security Advisory 0194 安全漏洞 — Wi-Fi Access Points 6.5 Medium 2026-10-06
CVE-2026-104044 SSSD 伪造Kerberos认证请求导致拒绝服务漏洞 — Red Hat Enterprise Linux 10 6.2 Medium 2026-10-06
CVE-2026-104038 SSSD 通过证书映射缺失SID扩展拒绝服务漏洞 — Red Hat Enterprise Linux 10 5.9 Medium 2026-10-06
CVE-2026-93316 启动参数--cdi-disabled导致特定构建崩溃 — BuildKit 7.1 High 2026-10-05
CVE-2026-66859 Apache Thrift c_glib 多路复用处理器崩溃漏洞 — Apache Thrift 8.7 High 2026-10-02
CVE-2026-87117 Apache Thrift PHP thrift_protocol 加速器解引用缺少容器元素规范漏洞 — Apache Thrift 8.7 High 2026-10-02
CVE-2026-82357 RT-Labs C-Open CANopen空指针解引用漏洞 — C-Open 6.5 Medium 2026-10-01
CVE-2026-9032 TP-Link Tapo C120/C200 空指针解引用拒绝服务漏洞 — Tapo C200 V5 7.1 High 2026-10-01
CVE-2026-63686 Apache HTTP Server mod_xml2enc 崩溃漏洞 — Apache HTTP Server - - 2026-10-01
CVE-2026-46729 Apache HTTP Server mod_heartmonitor拒绝服务漏洞 — Apache HTTP Server - - 2026-10-01
CVE-2026-47531 NVIDIA驱动内核空指针解引用致拒绝服务漏洞 — GeForce 4.4 Medium 2026-09-30
CVE-2026-47526 NVIDIA GPU驱动固件空指针解引用致拒绝服务 — GeForce 4.4 Medium 2026-09-30
CVE-2026-47584 NVIDIA Windows驱动内核空指针解引用致拒绝服务 — GeForce 5.5 Medium 2026-09-30
CVE-2026-47557 NVIDIA Linux驱动内核NULL指针解引用致拒绝服务 — GeForce 5.5 Medium 2026-09-30
CVE-2026-47549 NVIDIA Linux驱动内核空指针解引用致拒绝服务 — GeForce 5.5 Medium 2026-09-30
CVE-2026-47517 NVIDIA Linux驱动内核空指针解引用致拒绝服务 — GeForce 5.5 Medium 2026-09-30
CVE-2026-47563 NVIDIA Linux驱动内核空指针解引用漏洞 — GeForce 7.8 High 2026-09-30
CVE-2026-92871 Pgpool-II空指针解引用致看门狗进程异常终止 — Pgpool-II 8.7 High 2026-09-30
CVE-2026-86134 Fireware OS 远程拒绝服务漏洞 — Fireware OS 8.7 High 2026-09-30

CWE-476（空指针解引用） 是常见的弱点类别，本平台收录该类弱点关联的 1557 条 CVE 漏洞。