Weaknesses of type CWE-415

364 results

Uso após liberação de memória

Ocorre quando o código tenta acessar ou manipular um bloco de memória após ele ter sido liberado (freed). O programa perde o controle sobre esse espaço, que pode ser reatribuído a outra estrutura de dados, causando corrupção de memória, travamentos ou execução arbitrária de código.

Example

Um buffer é alocado com malloc(), um ponteiro guarda seu endereço, o buffer é liberado com free(), mas o código continua usando o ponteiro para ler ou escrever dados. Um atacante pode alocar uma estrutura crítica no mesmo endereço e fazer o programa sobrescrever dados sensíveis ou ganhar controle de execução.

How to mitigate

Após liberar memória (free, delete), sempre anule o ponteiro (ptr = NULL) ou use linguagens com gerenciamento automático. Em C/C++, implemente verificações de validade ou use ferramentas como AddressSanitizer durante testes. Prefira smart pointers (unique_ptr, shared_ptr) em C++ moderno.

CVE-2025-27730HIGHWindows Digital Media Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2024-50215HIGHnvmet-auth: assign dh_key to NULL after kfree_sensitiveEPSS 0.6%CVE-2024-43514HIGHWindows Resilient File System (ReFS) Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2023-23402HIGHWindows Media Remote Code Execution VulnerabilityEPSS 0.6%CVE-2022-47975HIGHThe DUBAI module has a double free vulnerability. Successful exploitation of this vulnerability may affect system availability.EPSS 0.6%CVE-2023-45584MEDIUMA double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FoEPSS 0.6%CVE-2026-63652HIGHFreeRDP: Double-free of `client_formats` in the rdpsnd server channel on a malformed Client Audio Formats PDUEPSS 0.6%CVE-2026-69876HIGHWindows DHCP Server Remote Code Execution VulnerabilityEPSS 0.6%CVE-2025-5351MEDIUMLibssh: double free vulnerability in libssh key export functionsEPSS 0.6%CVE-2026-55132HIGHMicrosoft Word Remote Code Execution VulnerabilityEPSS 0.6%CVE-2026-69337HIGHWindows Registry Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2024-43640HIGHWindows Kernel-Mode Driver Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2025-23322HIGHNVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where multiple requests could cause a double free when a streaEPSS 0.6%CVE-2024-21606HIGHJunos OS: SRX Series: When "tcp-encap" is configured and specific packets are received flowd will crashEPSS 0.6%CVE-2024-21445HIGHWindows USB Print Driver Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2025-4574MEDIUMCrossbeam-channel: crossbeam-channel vulnerable to double free on dropEPSS 0.5%CVE-2025-21183HIGHWindows Resilient File System (ReFS) Deduplication Service Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2025-21182HIGHWindows Resilient File System (ReFS) Deduplication Service Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2020-25637—A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting information about netEPSS 0.5%CVE-2024-12107HIGHDouble Free in µD3TNEPSS 0.5%