Weaknesses of type CWE-415

364 results

Uso após liberação de memória

Ocorre quando o código tenta acessar ou manipular um bloco de memória após ele ter sido liberado (freed). O programa perde o controle sobre esse espaço, que pode ser reatribuído a outra estrutura de dados, causando corrupção de memória, travamentos ou execução arbitrária de código.

Example

Um buffer é alocado com malloc(), um ponteiro guarda seu endereço, o buffer é liberado com free(), mas o código continua usando o ponteiro para ler ou escrever dados. Um atacante pode alocar uma estrutura crítica no mesmo endereço e fazer o programa sobrescrever dados sensíveis ou ganhar controle de execução.

How to mitigate

Após liberar memória (free, delete), sempre anule o ponteiro (ptr = NULL) ou use linguagens com gerenciamento automático. Em C/C++, implemente verificações de validade ou use ferramentas como AddressSanitizer durante testes. Prefira smart pointers (unique_ptr, shared_ptr) em C++ moderno.

CVE-2024-23379MEDIUMDouble Free in DSP ServicesEPSS 0.1%CVE-2023-21106HIGHIn adreno_set_param of adreno_gpu.c, there is a possible memory corruption due to a double free. This could lead to local escalation of privEPSS 0.1%CVE-2026-23789HIGHAn issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400EPSS 0.1%CVE-2026-32848MEDIUMNetBSD cryptodev Race Condition Double-Free via cryptodev_op()EPSS 0.1%CVE-2026-11388MEDIUMDouble Free vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation.EPSS 0.1%CVE-2024-21461HIGHDouble Free in HLOSEPSS 0.1%CVE-2026-28537MEDIUMDouble free vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.1%CVE-2026-34867MEDIUMDouble free vulnerability in the multi-mode input system. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.1%CVE-2023-21030HIGHIn Confirmation of keystore_cli_v2.cpp, there is a possible way to corrupt memory due to a double free. This could lead to local escalation EPSS 0.1%CVE-2026-23790MEDIUMAn issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A double-free vuEPSS 0.1%CVE-2025-27051HIGHDouble Free in Windows WLAN HostEPSS 0.1%CVE-2025-27046HIGHDouble Free in DisplayEPSS 0.1%CVE-2025-47316HIGHDouble Free in VideoEPSS 0.1%CVE-2023-32824MEDIUMIn rpmb , there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution prEPSS 0.1%CVE-2025-47396HIGHDouble Free in GraphicsEPSS 0.1%CVE-2024-44098HIGHIn lwis_device_event_states_clear_locked of lwis_event.c, there is a possible privilege escalation due to a double free. This could lead to EPSS 0.1%CVE-2025-21432HIGHDouble Free in SPS-HLOSEPSS 0.1%CVE-2025-20786MEDIUMIn display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actEPSS 0.1%CVE-2022-33231CRITICALDouble free in CoreEPSS 0.1%CVE-2025-47356HIGHDouble Free in VideoEPSS 0.1%