Weaknesses of type CWE-415

453 results

Uso após liberação de memória

Ocorre quando o código tenta acessar ou manipular um bloco de memória após ele ter sido liberado (freed). O programa perde o controle sobre esse espaço, que pode ser reatribuído a outra estrutura de dados, causando corrupção de memória, travamentos ou execução arbitrária de código.

Example

Um buffer é alocado com malloc(), um ponteiro guarda seu endereço, o buffer é liberado com free(), mas o código continua usando o ponteiro para ler ou escrever dados. Um atacante pode alocar uma estrutura crítica no mesmo endereço e fazer o programa sobrescrever dados sensíveis ou ganhar controle de execução.

How to mitigate

Após liberar memória (free, delete), sempre anule o ponteiro (ptr = NULL) ou use linguagens com gerenciamento automático. Em C/C++, implemente verificações de validade ou use ferramentas como AddressSanitizer durante testes. Prefira smart pointers (unique_ptr, shared_ptr) em C++ moderno.

CVE-2026-119338MEDIUMTesseract: Double free and use after free in the PAGE XML renderer on right-to-left pagesEPSS 0.1%CVE-2022-25750HIGHMemory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon MobileEPSS 0.1%CVE-2026-56109HIGHALSA Library < 1.2.16.1 Double-Free via parse_def() in conf.cEPSS 0.1%CVE-2026-23449HIGHnet/sched: teql: Fix double-free in teql_master_xmitEPSS 0.1%CVE-2026-47558HIGHNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause a double-free oEPSS 0.1%CVE-2026-57842HIGHNetBSD COMPAT_NETBSD32 Double Free / Use-After-Free via recvmsg() msg_iovlenEPSS 0.1%CVE-2026-31507HIGHnet/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe bufferEPSS 0.1%CVE-2022-25660HIGHMemory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial EPSS 0.1%CVE-2026-20573MEDIUMIn afe, there is a possible memory corruption due to double free. This could lead to local escalation of privilege if a malicious actor has EPSS 0.1%CVE-2026-46690MEDIUMunbounded-spsc: Sender::send pointer-as-value transmute causes OOB read and fake-Arc drop under TX/RX raceEPSS 0.1%CVE-2026-116743MEDIUMlibyal libmsiecf through 20260525 Double Free via libmsiecf_url_values_read_dataEPSS 0.1%CVE-2026-68236HIGHdrm/amd/display: set new_stream to NULL after releaseEPSS 0.1%CVE-2026-64580HIGHxfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()EPSS 0.1%CVE-2026-23790MEDIUMAn issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A double-free vuEPSS 0.1%CVE-2026-43120HIGHRDMA/irdma: Fix double free related to rereg_user_mrEPSS 0.1%CVE-2026-64222HIGHocteontx2-pf: avoid double free of pool->stack on AQ init failureEPSS 0.1%CVE-2026-31468HIGHvfio/pci: Fix double free in dma-buf featureEPSS 0.1%CVE-2022-25717MEDIUMUse-After-Free Issue in DisplayEPSS 0.1%CVE-2026-43278HIGHdm: clear cloned request bio pointer when last clone bio completesEPSS 0.1%CVE-2023-28583MEDIUMDouble Free in Data Network Stack & ConnectivityEPSS 0.1%