Weaknesses of type CWE-415

453 results

Uso após liberação de memória

Ocorre quando o código tenta acessar ou manipular um bloco de memória após ele ter sido liberado (freed). O programa perde o controle sobre esse espaço, que pode ser reatribuído a outra estrutura de dados, causando corrupção de memória, travamentos ou execução arbitrária de código.

Example

Um buffer é alocado com malloc(), um ponteiro guarda seu endereço, o buffer é liberado com free(), mas o código continua usando o ponteiro para ler ou escrever dados. Um atacante pode alocar uma estrutura crítica no mesmo endereço e fazer o programa sobrescrever dados sensíveis ou ganhar controle de execução.

How to mitigate

Após liberar memória (free, delete), sempre anule o ponteiro (ptr = NULL) ou use linguagens com gerenciamento automático. Em C/C++, implemente verificações de validade ou use ferramentas como AddressSanitizer durante testes. Prefira smart pointers (unique_ptr, shared_ptr) em C++ moderno.

CVE-2025-13844HIGHCWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user imports a malicious project file (SSD fiEPSS 0.2%CVE-2025-61145MEDIUMlibtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.EPSS 0.2%CVE-2025-43282MEDIUMA double free issue was addressed with improved memory management. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS SeqEPSS 0.2%CVE-2022-32614MEDIUMIn audio, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System executionEPSS 0.2%CVE-2026-31053MEDIUMA double free vulnerability exists in librz/bin/format/le/le.c in the function le_load_fixup_record(). When processing malformed or circularEPSS 0.2%CVE-2026-84558MEDIUMA double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27. An app may be able to cause EPSS 0.2%CVE-2026-85904HIGHWindows Device Association Service Elevation of Privilege VulnerabilityEPSS 0.2%CVE-2026-64118HIGHqed: fix double free in qed_cxt_tables_alloc()EPSS 0.2%CVE-2026-23789HIGHAn issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400EPSS 0.2%CVE-2026-17573MEDIUMDouble Free in H5D__chunk_copy() in HDF5 via a Crafted Chunk-Index Size FieldEPSS 0.2%CVE-2023-25801HIGHTensorFlow has double free in Fractional(Max/Avg)PoolEPSS 0.1%CVE-2026-11388MEDIUMDouble Free vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation.EPSS 0.1%CVE-2025-13566MEDIUMjarun nnn nnn.c run_cmd_as_plugin double freeEPSS 0.1%CVE-2023-52383MEDIUMDouble-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability.EPSS 0.1%CVE-2023-52384MEDIUMDouble-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability.EPSS 0.1%CVE-2026-82325MEDIUMA use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a syEPSS 0.1%CVE-2026-68994—A double free vulnerability in NPU driver due to improper pointer management (941)EPSS 0.1%CVE-2026-45202MEDIUMGPU DDK - Silent High-Order CMA Memory Leak & Double Free in `_FreeOSPages_Fast`EPSS 0.1%CVE-2026-68993—A double free vulnerability in NPU driver due to improper pointer management (940)EPSS 0.1%CVE-2026-43128HIGHRDMA/umem: Fix double dma_buf_unpin in failure pathEPSS 0.1%