Weaknesses of type CWE-244

20 results

Falha na limpeza de memória heap antes da liberação

Quando um programa libera memória heap (desaloca) sem antes sobrescrever seu conteúdo, dados sensíveis (senhas, chaves criptográficas, tokens) podem permanecer legíveis naquela região. Um atacante com acesso ao processo ou à memória física consegue recuperar essas informações mesmo após a desalocação.

Example

Uma aplicação que autentica usuários aloca um buffer para armazenar a senha, valida-a contra um hash e depois faz free(buffer). Os bytes da senha continuam na heap até ser reutilizada, e ferramentas forenses ou debuggers conseguem recuperá-los. O mesmo ocorre com chaves de criptografia descartadas sem zerar.

How to mitigate

Antes de liberar memória com dados sensíveis, sobrescreva-a explicitamente com zeros ou valores aleatórios usando funções que não sejam otimizadas pelo compilador (como memset_s em C, ou equivalentes). Em linguagens de alto nível, use tipos que garantam limpeza automática (SecureString em .NET, ou bibliotecas especializadas) e evite reutilizar buffers com dados criptográficos.

CVE-2022-20943MEDIUMMultiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products couEPSS 0.9%CVE-2022-20922MEDIUMMultiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products couEPSS 0.8%CVE-2023-20070MEDIUMA vulnerability in the TLS 1.3 implementation of the Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote atEPSS 0.5%CVE-2023-20177MEDIUMA vulnerability in the SSL file policy implementation of Cisco Firepower Threat Defense (FTD) Software that occurs when the SSL/TLS connectiEPSS 0.5%CVE-2025-5105MEDIUMTOZED ZLT W51 Service Port 7777 heap inspectionEPSS 0.4%CVE-2025-26304HIGHA memory leak has been identified in the parseSWF_EXPORTASSETS function in util/parser.c of libming v0.4.8.EPSS 0.4%CVE-2025-26305HIGHA memory leak has been identified in the parseSWF_SOUNDINFO function in util/parser.c of libming v0.4.8, which allows attackers to cause a dEPSS 0.4%CVE-2026-20039HIGHCisco Adaptive Security Appliance and Firepower Threat Defense Software SSL VPN Authentication Denial of Service VulnerabilityEPSS 0.4%CVE-2025-36118HIGHIBM Storage Virtualize Information DisclosureEPSS 0.4%CVE-2025-45663MEDIUMAn issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a dom_event structure.EPSS 0.3%CVE-2025-1719MEDIUMMultiple Vulnerabilities in IBM Concert SoftwareEPSS 0.3%CVE-2025-1722MEDIUMMultiple Vulnerabilities in IBM Concert SoftwareEPSS 0.3%CVE-2025-1759MEDIUMIBM Concert Software information disclosureEPSS 0.3%CVE-2025-70873HIGHAn information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obEPSS 0.3%CVE-2025-1721MEDIUMBM Concert Software Improper Clearing of Heap Memory Before Release.EPSS 0.3%CVE-2026-48025MEDIUMnebula-mesh: Decrypted CA private key persists in heap after signingEPSS 0.3%CVE-2023-20031MEDIUMA vulnerability in the SSL/TLS certificate handling of Snort 3 Detection Engine integration with Cisco Firepower Threat Defense (FTD) SoftwaEPSS 0.3%CVE-2025-33101MEDIUMMultiple Vulnerabilities in IBM Concert Software.EPSS 0.2%CVE-2025-33013MEDIUMIBM MQ Operator information disclosureEPSS 0.1%CVE-2025-36083MEDIUMMultiple Vulnerabilities in IBM Concert Software.EPSS 0.1%