Weaknesses of type CWE-415

364 results

Uso após liberação de memória

Ocorre quando o código tenta acessar ou manipular um bloco de memória após ele ter sido liberado (freed). O programa perde o controle sobre esse espaço, que pode ser reatribuído a outra estrutura de dados, causando corrupção de memória, travamentos ou execução arbitrária de código.

Example

Um buffer é alocado com malloc(), um ponteiro guarda seu endereço, o buffer é liberado com free(), mas o código continua usando o ponteiro para ler ou escrever dados. Um atacante pode alocar uma estrutura crítica no mesmo endereço e fazer o programa sobrescrever dados sensíveis ou ganhar controle de execução.

How to mitigate

Após liberar memória (free, delete), sempre anule o ponteiro (ptr = NULL) ou use linguagens com gerenciamento automático. Em C/C++, implemente verificações de validade ou use ferramentas como AddressSanitizer durante testes. Prefira smart pointers (unique_ptr, shared_ptr) em C++ moderno.

CVE-2023-27537—A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without EPSS 1.9%CVE-2022-44640CRITICALHeimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key DistribEPSS 1.8%CVE-2020-11017MEDIUMDouble free in cliprdr_server_receive_capabilities in FreeRDPEPSS 1.8%CVE-2010-3957HIGHDouble free vulnerability in the OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 EPSS 1.8%CVE-2025-21201HIGHWindows Telephony Server Remote Code Execution VulnerabilityEPSS 1.8%CVE-2024-30097HIGHMicrosoft Speech Application Programming Interface (SAPI) Remote Code Execution VulnerabilityEPSS 1.7%CVE-2024-23809CRITICALA double-free vulnerability exists in the BrainVision ASCII Header Parsing functionality of The Biosig Project libbiosig 2.5.0 and Master BrEPSS 1.7%CVE-2024-38087HIGHSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS 1.7%CVE-2023-27320HIGHSudo before 1.9.13p2 has a double free in the per-command chroot feature.EPSS 1.7%CVE-2018-0160—A vulnerability in Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attackeEPSS 1.6%CVE-2024-22097CRITICALA double-free vulnerability exists in the BrainVision Header Parsing functionality of The Biosig Project libbiosig Master Branch (ab0ee111) EPSS 1.6%CVE-2024-30013HIGHWindows MultiPoint Services Remote Code Execution VulnerabilityEPSS 1.6%CVE-2022-32574HIGHA double-free vulnerability exists in the web interface /action/ipcamSetParamPost functionality of Abode Systems, Inc. iota All-In-One SecurEPSS 1.5%CVE-2021-3492HIGHUbuntu linux kernel shiftfs file system double free vulnerabilityEPSS 1.5%CVE-2026-62766HIGHWindows Kerberos Elevation of Privilege VulnerabilityEPSS 1.5%CVE-2026-18798HIGHQUIC Server May Trigger Double Free When Processing INITIAL PacketEPSS 1.5%CVE-2023-39975HIGHkdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger anEPSS 1.5%CVE-2024-43447HIGHWindows SMBv3 Server Remote Code Execution VulnerabilityEPSS 1.5%CVE-2024-27099CRITICALAzure IoT Platform Device SDK Double Free VulnerabilityEPSS 1.4%CVE-2020-1686HIGHJunos OS: Kernel crash (vmcore) upon receipt of a malformed IPv6 packet.EPSS 1.4%