Weaknesses of type CWE-415

364 results

Uso após liberação de memória

Ocorre quando o código tenta acessar ou manipular um bloco de memória após ele ter sido liberado (freed). O programa perde o controle sobre esse espaço, que pode ser reatribuído a outra estrutura de dados, causando corrupção de memória, travamentos ou execução arbitrária de código.

Example

Um buffer é alocado com malloc(), um ponteiro guarda seu endereço, o buffer é liberado com free(), mas o código continua usando o ponteiro para ler ou escrever dados. Um atacante pode alocar uma estrutura crítica no mesmo endereço e fazer o programa sobrescrever dados sensíveis ou ganhar controle de execução.

How to mitigate

Após liberar memória (free, delete), sempre anule o ponteiro (ptr = NULL) ou use linguagens com gerenciamento automático. Em C/C++, implemente verificações de validade ou use ferramentas como AddressSanitizer durante testes. Prefira smart pointers (unique_ptr, shared_ptr) em C++ moderno.

CVE-2022-32614MEDIUMIn audio, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System executionEPSS 0.1%CVE-2023-52384MEDIUMDouble-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability.EPSS 0.1%CVE-2026-82325MEDIUMA use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a syEPSS 0.1%CVE-2026-45202MEDIUMGPU DDK - Silent High-Order CMA Memory Leak & Double Free in `_FreeOSPages_Fast`EPSS 0.1%CVE-2025-61145MEDIUMlibtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.EPSS 0.1%CVE-2026-57842HIGHNetBSD COMPAT_NETBSD32 Double Free / Use-After-Free via recvmsg() msg_iovlenEPSS 0.1%CVE-2026-45324LOWRizin: Double free in cmd_search.cEPSS 0.1%CVE-2026-13713MEDIUMYAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still on the parser value stackEPSS 0.1%CVE-2022-25750HIGHMemory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon MobileEPSS 0.1%CVE-2025-13566MEDIUMjarun nnn nnn.c run_cmd_as_plugin double freeEPSS 0.1%CVE-2026-44348LOWPoDoFo: Double-free vulnerability in compute_hash_to_sign()EPSS 0.1%CVE-2022-25660HIGHMemory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial EPSS 0.1%CVE-2026-46690MEDIUMunbounded-spsc: Sender::send pointer-as-value transmute causes OOB read and fake-Arc drop under TX/RX raceEPSS 0.1%CVE-2026-20510MEDIUMIn camera middleware, there is a possible escalation of privilege due to double free. This could lead to local escalation of privilege if a EPSS 0.1%CVE-2023-28583MEDIUMDouble Free in Data Network Stack & ConnectivityEPSS 0.1%CVE-2022-33307HIGHDouble free in AutomotiveEPSS 0.1%CVE-2022-40522HIGHDouble free in Linux NetworkingEPSS 0.1%CVE-2022-33227MEDIUMDouble free in Linux-AndroidEPSS 0.1%CVE-2022-25717MEDIUMUse-After-Free Issue in DisplayEPSS 0.1%CVE-2026-6794HIGHMultiple Vulnerabilities in IBM Concert SoftwareEPSS 0.1%