Weaknesses of type CWE-415

364 results

Uso após liberação de memória

Ocorre quando o código tenta acessar ou manipular um bloco de memória após ele ter sido liberado (freed). O programa perde o controle sobre esse espaço, que pode ser reatribuído a outra estrutura de dados, causando corrupção de memória, travamentos ou execução arbitrária de código.

Example

Um buffer é alocado com malloc(), um ponteiro guarda seu endereço, o buffer é liberado com free(), mas o código continua usando o ponteiro para ler ou escrever dados. Um atacante pode alocar uma estrutura crítica no mesmo endereço e fazer o programa sobrescrever dados sensíveis ou ganhar controle de execução.

How to mitigate

Após liberar memória (free, delete), sempre anule o ponteiro (ptr = NULL) ou use linguagens com gerenciamento automático. Em C/C++, implemente verificações de validade ou use ferramentas como AddressSanitizer durante testes. Prefira smart pointers (unique_ptr, shared_ptr) em C++ moderno.

CVE-2026-43622HIGHllama.cpp b1886–b7445 Double Free via llama-android.cppEPSS 0.2%CVE-2022-32962MEDIUMHiCOS’ client-side citizen digital certificate - Double FreeEPSS 0.2%CVE-2024-26846MEDIUMnvme-fc: do not wait in vain when unloading moduleEPSS 0.2%CVE-2022-3238HIGHA double-free flaw was found in the Linux kernel’s NTFS3 subsystem in how a user triggers remount and umount simultaneously. This flaw allowEPSS 0.2%CVE-2025-8585MEDIUMlibav DSS File Demuxer avconv.c main double freeEPSS 0.2%CVE-2024-26932HIGHusb: typec: tcpm: fix double-free issue in tcpm_port_unregister_pd()EPSS 0.2%CVE-2022-43454HIGHA double free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadEPSS 0.2%CVE-2026-69398HIGHWindows Bluetooth Service Elevation of Privilege VulnerabilityEPSS 0.2%CVE-2024-56775HIGHdrm/amd/display: Fix handling of plane refcountEPSS 0.2%CVE-2026-32219HIGHMicrosoft Brokering File System Elevation of Privilege VulnerabilityEPSS 0.2%CVE-2024-53133HIGHdrm/amd/display: Handle dml allocation failure to avoid crashEPSS 0.2%CVE-2022-40683HIGHA double free in Fortinet FortiWeb version 7.0.0 through 7.0.3 may allows attacker to execute unauthorized code or commands via specially crEPSS 0.2%CVE-2021-34981HIGHLinux Kernel Bluetooth CMTP Module Double Free Privilege Escalation VulnerabilityEPSS 0.2%CVE-2024-50071HIGHpinctrl: nuvoton: fix a double free in ma35_pinctrl_dt_node_to_map_func()EPSS 0.2%CVE-2025-31235MEDIUMA double free issue was addressed with improved memory management. This issue is fixed in iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14EPSS 0.2%CVE-2023-28411MEDIUMDouble free in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via EPSS 0.2%CVE-2023-21629MEDIUMDouble Free in ModemEPSS 0.2%CVE-2026-56109HIGHALSA Library < 1.2.16.1 Double-Free via parse_def() in conf.cEPSS 0.2%CVE-2025-51006HIGHWithin tcpreplay's tcprewrite, a double free vulnerability has been identified in the dlt_linuxsll2_cleanup() function in plugins/dlt_linuxsEPSS 0.2%CVE-2025-8058MEDIUMThe regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can beEPSS 0.2%