Weaknesses of type CWE-415

364 results

Uso após liberação de memória

Ocorre quando o código tenta acessar ou manipular um bloco de memória após ele ter sido liberado (freed). O programa perde o controle sobre esse espaço, que pode ser reatribuído a outra estrutura de dados, causando corrupção de memória, travamentos ou execução arbitrária de código.

Example

Um buffer é alocado com malloc(), um ponteiro guarda seu endereço, o buffer é liberado com free(), mas o código continua usando o ponteiro para ler ou escrever dados. Um atacante pode alocar uma estrutura crítica no mesmo endereço e fazer o programa sobrescrever dados sensíveis ou ganhar controle de execução.

How to mitigate

Após liberar memória (free, delete), sempre anule o ponteiro (ptr = NULL) ou use linguagens com gerenciamento automático. Em C/C++, implemente verificações de validade ou use ferramentas como AddressSanitizer durante testes. Prefira smart pointers (unique_ptr, shared_ptr) em C++ moderno.

CVE-2025-23282HIGHNVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to use a race condition to escalate privileges. A sEPSS 0.2%CVE-2023-21500MEDIUMDouble free validation vulnerability in setPinPadImages in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to accesEPSS 0.2%CVE-2024-47404HIGHLiteos_a has a double free vulnerabilityEPSS 0.2%CVE-2025-2027MEDIUMA double free vulnerability has been identified in the ASUS System Analysis service. This vulnerability can be triggered by sending speciallEPSS 0.2%CVE-2023-53308HIGHnet: fec: Better handle pm_runtime_get() failing in .remove()EPSS 0.2%CVE-2026-31053MEDIUMA double free vulnerability exists in librz/bin/format/le/le.c in the function le_load_fixup_record(). When processing malformed or circularEPSS 0.2%CVE-2026-6654MEDIUMUse-After-Free and Double-Free in IntoIter::drop when element drop panicsEPSS 0.2%CVE-2025-13844HIGHCWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user imports a malicious project file (SSD fiEPSS 0.2%CVE-2025-15667MEDIUMGPAC MP4Box avc_ext.c gf_isom_nalu_sample_rewrite double freeEPSS 0.2%CVE-2025-65955MEDIUMImageMagick has a use-after-free/double-free risk in Options::fontFamily when clearing familyEPSS 0.2%CVE-2025-68657MEDIUMespressif/usb_host_hid Double-Free Race Condition in USB Host HID Device Close PathEPSS 0.2%CVE-2025-43282MEDIUMA double free issue was addressed with improved memory management. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS SeqEPSS 0.2%CVE-2026-17050MEDIUMDouble free of the USB host configuration descriptor when device enumeration failsEPSS 0.2%CVE-2026-5186MEDIUMNothings stb Multi-frame GIF File stb_image.h stbi__load_gif_main double freeEPSS 0.2%CVE-2025-12343LOWFfmpeg: double-free vulnerability in ffmpeg tensorflow dnn backendEPSS 0.2%CVE-2026-84558MEDIUMA double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27. An app may be able to cause EPSS 0.2%CVE-2026-17573MEDIUMDouble Free in H5D__chunk_copy() in HDF5 via a Crafted Chunk-Index Size FieldEPSS 0.2%CVE-2023-25801HIGHTensorFlow has double free in Fractional(Max/Avg)PoolEPSS 0.1%CVE-2026-23868MEDIUMGiflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The condEPSS 0.1%CVE-2023-52383MEDIUMDouble-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability.EPSS 0.1%