Weaknesses of type CWE-415

364 results

Uso após liberação de memória

Ocorre quando o código tenta acessar ou manipular um bloco de memória após ele ter sido liberado (freed). O programa perde o controle sobre esse espaço, que pode ser reatribuído a outra estrutura de dados, causando corrupção de memória, travamentos ou execução arbitrária de código.

Example

Um buffer é alocado com malloc(), um ponteiro guarda seu endereço, o buffer é liberado com free(), mas o código continua usando o ponteiro para ler ou escrever dados. Um atacante pode alocar uma estrutura crítica no mesmo endereço e fazer o programa sobrescrever dados sensíveis ou ganhar controle de execução.

How to mitigate

Após liberar memória (free, delete), sempre anule o ponteiro (ptr = NULL) ou use linguagens com gerenciamento automático. Em C/C++, implemente verificações de validade ou use ferramentas como AddressSanitizer durante testes. Prefira smart pointers (unique_ptr, shared_ptr) em C++ moderno.

CVE-2026-11576HIGHThe security fix for CVE-2025-0728 in eclipse-threadx NetX Duo refactors error handling in the HTTP server PUT process to use a shared cleanEPSS 0.5%CVE-2020-37239CRITICALlibbabl 0.1.62 Broken Double Free Detection Memory SafetyEPSS 0.5%CVE-2026-20135HIGHCisco Secure Firewall Threat Defense Software TLS 1.3 Denial of Service VulnerabilityEPSS 0.5%CVE-2026-66032HIGHlibssh2 Double-Free Heap Corruption via sftp_open()EPSS 0.4%CVE-2025-5262HIGHA double-free could have occurred in `vpx_codec_enc_init_multi` after a failed allocation when initializing the encoder for WebRTC. This couEPSS 0.4%CVE-2024-49095HIGHWindows PrintWorkflowUserSvc Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2024-10934CRITICALOpenBSD NFS double-free vulnerabilityEPSS 0.4%CVE-2026-43823HIGHWhen initializing an RSA public key from DER or PEM bytes throws an error, the EVP_PKEY* is double-freed: first in the catch block, then in EPSS 0.4%CVE-2026-12659HIGHRockwell Automation Flex 5000® Adapter - Denial of ServiceEPSS 0.4%CVE-2022-50401CRITICALnfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failureEPSS 0.4%CVE-2026-55995HIGHDouble-free in the iSNS attribute decoder in open-iscsiEPSS 0.4%CVE-2024-39564HIGHJunos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to RPD crashEPSS 0.4%CVE-2026-10653MEDIUMNon-atomic `net_buf` reference counts cause double-free / free-list corruption under concurrent unrefEPSS 0.4%CVE-2025-20134HIGHCisco Adaptive Security Appliance and Firepower Threat Defense Software SSL/TLS Certificate Denial of Service VulnerabilityEPSS 0.4%CVE-2026-47895HIGHIn strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are EPSS 0.4%CVE-2024-23141HIGHMultiple Vulnerabilities in the Autodesk AutoCAD Desktop SoftwareEPSS 0.4%CVE-2026-21918HIGHJunos OS: SRX and MX Series: When TCP packets occur in a specific sequence flowd crashesEPSS 0.4%CVE-2026-48850LOWPuTTY 0.72 before 0.84 has a double free in RSA KEX.EPSS 0.4%CVE-2025-23102HIGHAn issue was discovered in Samsung Mobile Processor Exynos 980, 990, 1080, 2100, 1280, 2200, 1380, 1480 and 2400. A Double Free in the mobilEPSS 0.4%CVE-2025-21673CRITICALsmb: client: fix double free of TCP_Server_Info::hostnameEPSS 0.4%