CWE-824 使用未经初始化的指针 类弱点 180 条 CVE 漏洞汇总,含 AI 中文分析。
CWE-824 属于内存安全漏洞,指程序访问未初始化的指针。攻击者常利用此缺陷读取或写入非法内存地址,导致服务拒绝;若指针被用作函数调用,更可能引发任意代码执行,造成严重安全威胁。开发者应避免使用未赋值的指针,确保所有指针在解引用前均指向有效内存,并启用编译器警告以检测此类隐患,从而从源头消除风险。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-49130 | Siemens Solid Edge 缓冲区错误漏洞 — Solid Edge SE2023 | 7.8 | High | 2024-01-09 |
| CVE-2023-44362 | Adobe Prelude 缓冲区错误漏洞 — Prelude | 5.5 | Medium | 2023-12-13 |
| CVE-2023-47072 | Adobe After Effects 安全漏洞 — After Effects | 3.3 | Low | 2023-11-17 |
| CVE-2023-47060 | Adobe Premiere Pro 安全漏洞 — Premiere Pro | 3.3 | Low | 2023-11-16 |
| CVE-2023-47047 | Adobe Audition 安全漏洞 — Audition | 5.5 | Medium | 2023-11-16 |
| CVE-2023-47053 | Adobe Audition 安全漏洞 — Audition | 5.5 | Medium | 2023-11-16 |
| CVE-2023-47054 | Adobe Audition 安全漏洞 — Audition | 5.5 | Medium | 2023-11-16 |
| CVE-2023-47044 | Adobe Media Encoder 安全漏洞 — Media Encoder | 5.5 | Medium | 2023-11-16 |
| CVE-2023-44329 | Adobe Bridge 安全漏洞 — Bridge | 5.5 | Medium | 2023-11-16 |
| CVE-2023-44327 | Adobe Bridge 安全漏洞 — Bridge | 5.5 | Medium | 2023-11-16 |
| CVE-2023-44365 | Adobe Acrobat Reader 安全漏洞 — Acrobat Reader | 7.8 | High | 2023-11-16 |
| CVE-2023-27858 | Rockwell Automation Arena Simulation Software 缓冲区错误漏洞 — Arena Simulation | 7.8 | High | 2023-10-27 |
| CVE-2023-26370 | Adobe Photoshop 缓冲区错误漏洞 — Photoshop Desktop | 7.8 | High | 2023-10-11 |
| CVE-2023-20597 | AMD DXE Driver 安全漏洞 — Ryzen™ 3000 Series Desktop Processors “Matisse” | 4.4 | - | 2023-09-20 |
| CVE-2023-20594 | AMD DXE Driver 安全漏洞 — Ryzen™ 3000 Series Desktop Processors “Matisse” | 4.4 | - | 2023-09-20 |
| CVE-2023-4508 | Gerbv 缓冲区错误漏洞 — gerbv | 5.5 | Medium | 2023-08-24 |
| CVE-2023-38246 | Adobe Acrobat Reader 缓冲区错误漏洞 — Acrobat Reader | 7.8 | High | 2023-08-10 |
| CVE-2023-38226 | Adobe Acrobat Reader 缓冲区错误漏洞 — Acrobat Reader | 7.8 | High | 2023-08-10 |
| CVE-2023-38223 | Adobe Acrobat Reader 缓冲区错误漏洞 — Acrobat Reader | 7.8 | High | 2023-08-10 |
| CVE-2023-38234 | Adobe Acrobat Reader 缓冲区错误漏洞 — Acrobat Reader | 7.8 | High | 2023-08-10 |
| CVE-2022-44451 | Babel 缓冲区错误漏洞 — Open Babel | 9.8 | Critical | 2023-07-21 |
| CVE-2022-42885 | Babel 缓冲区错误漏洞 — Open Babel | 9.8 | Critical | 2023-07-21 |
| CVE-2022-46280 | Babel 缓冲区错误漏洞 — Open Babel | 9.8 | Critical | 2023-07-21 |
| CVE-2023-21618 | Adobe Substance 3D Designer 缓冲区错误漏洞 — Substance3D - Designer | 7.8 | High | 2023-06-15 |
| CVE-2023-29178 | Fortinet FortiProxy 缓冲区错误漏洞 — FortiProxy | 4.1 | Medium | 2023-06-13 |
| CVE-2023-31244 | Horner Automation Cscape 缓冲区错误漏洞 — Cscape | 7.8 | High | 2023-06-06 |
| CVE-2023-24826 | RIOT RIOT-OS 缓冲区错误漏洞 — RIOT | 5.9 | Medium | 2023-05-30 |
| CVE-2023-29286 | Adobe Substance 3D Painter 缓冲区错误漏洞 — Substance3D - Painter | 5.5 | Medium | 2023-05-11 |
| CVE-2023-29278 | Adobe Substance 3D Painter 缓冲区错误漏洞 — Substance3D - Painter | 7.8 | High | 2023-05-11 |
| CVE-2023-30847 | h2o 缓冲区错误漏洞 — h2o | 8.2 | High | 2023-04-27 |
CWE-824(使用未经初始化的指针) 是常见的弱点类别,本平台收录该类弱点关联的 180 条 CVE 漏洞。