Weaknesses of type CWE-415

364 results

Uso após liberação de memória

Ocorre quando o código tenta acessar ou manipular um bloco de memória após ele ter sido liberado (freed). O programa perde o controle sobre esse espaço, que pode ser reatribuído a outra estrutura de dados, causando corrupção de memória, travamentos ou execução arbitrária de código.

Example

Um buffer é alocado com malloc(), um ponteiro guarda seu endereço, o buffer é liberado com free(), mas o código continua usando o ponteiro para ler ou escrever dados. Um atacante pode alocar uma estrutura crítica no mesmo endereço e fazer o programa sobrescrever dados sensíveis ou ganhar controle de execução.

How to mitigate

Após liberar memória (free, delete), sempre anule o ponteiro (ptr = NULL) ou use linguagens com gerenciamento automático. Em C/C++, implemente verificações de validade ou use ferramentas como AddressSanitizer durante testes. Prefira smart pointers (unique_ptr, shared_ptr) em C++ moderno.

CVE-2021-0271MEDIUMJunos OS: EX2200-C Series, EX3200 Series, EX3300 Series, EX4200 Series, EX4500 Series, EX4550 Series, EX6210 Series, EX8208 Series, EX8216 Series: Receipt of a crafted ARP packet by an adjacent attacker will cause the sfid process to core.EPSS 0.4%CVE-2025-59505HIGHWindows Smart Card Reader Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2023-53360CRITICALNFSv4.2: Rework scratch handling for READ_PLUS (again)EPSS 0.4%CVE-2026-14604MEDIUMOpen Asset Import Library Assimp PLY Model PlyLoader.cpp ExportToBlob double freeEPSS 0.4%CVE-2022-28388MEDIUMusb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1 has a double free.EPSS 0.4%CVE-2026-20863HIGHWin32k Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2026-43706MEDIUMA double free issue was addressed with improved memory management. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8EPSS 0.4%CVE-2023-41325HIGHOP-TEE double free in shdr_verify_signatureEPSS 0.4%CVE-2022-36043HIGHRizin Double Free in bobj.c when using qnx binary pluginEPSS 0.4%CVE-2026-87585HIGHDouble free in PDFium in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code EPSS 0.4%CVE-2024-53698LOWQTS, QuTS heroEPSS 0.4%CVE-2021-34734MEDIUMCisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery Protocol Double-Free Denial of Service VulnerabilityEPSS 0.4%CVE-2025-49693HIGHMicrosoft Brokering File System Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2021-27645LOWThe nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33, when processing a request for netgroup looEPSS 0.4%CVE-2023-29368HIGHWindows Filtering Platform Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2023-1449MEDIUMGPAC av_parsers.c gf_av1_reset_state double freeEPSS 0.4%CVE-2025-55118HIGHBMC Control-M/Agent memory corruption in SSL/TLS communicationEPSS 0.4%CVE-2024-41957MEDIUMVim double free in src/alloc.c:616EPSS 0.4%CVE-2026-89078CRITICALDouble Free in GitLabEPSS 0.4%CVE-2026-4358MEDIUMMemory safety issues in slot-based execution hash table spillEPSS 0.4%