Weaknesses of type CWE-416

5,042 results

Uso após liberação de memória

Ocorre quando o código tenta acessar um bloco de memória que já foi desalocado (free/delete). O ponteiro continua apontando para aquele endereço, mas o dado ali pode ter sido sobrescrito por outra operação, causando comportamento impredizível, corrupção de dados ou execução de código arbitrário.

Example

Um buffer é alocado, depois liberado com free(). Mais adiante, o código ainda tenta ler ou escrever naquele mesmo ponteiro sem verificar. Se um atacante controlar a alocação subsequente daquele endereço, consegue manipular o conteúdo que será lido.

How to mitigate

Anule o ponteiro imediatamente após liberar (ptr = NULL), implemente análise estática para detectar acessos pós-liberação, use ferramentas como valgrind ou AddressSanitizer nos testes, e considere linguagens com gerenciamento automático de memória para código sensível.

CVE-2024-38085HIGHWindows Graphics Component Elevation of Privilege VulnerabilityEPSS 5.3%CVE-2019-17141HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interacEPSS 5.2%CVE-2019-17140HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interacEPSS 5.2%CVE-2021-28632HIGHZDI-CAN-13471: Adobe Acrobat Reader DC AcroForm Field Use-After-Free Remote Code Execution VulnerabilityEPSS 5.2%CVE-2022-23308HIGHvalid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.EPSS 5.1%CVE-2021-28562HIGHAdobe Acrobat Reader use-after-free could lead to arbitrary code executionEPSS 5.1%CVE-2016-8619MEDIUMThe function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory double free.EPSS 5.0%CVE-2024-5841HIGHUse after free in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted EPSS 5.0%CVE-2020-27267—KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial Connectivity (all versions), OPC-Aggregator (all versEPSS 4.9%CVE-2024-12382HIGHUse after free in Translate in Google Chrome prior to 131.0.6778.139 allowed a remote attacker to potentially exploit heap corruption via a EPSS 4.9%CVE-2023-44371HIGHZDI-CAN-21998: Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution VulnerabilityEPSS 4.9%CVE-2020-10907HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. User interactionEPSS 4.9%CVE-2020-10906HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. User interactionEPSS 4.9%CVE-2020-10900HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. User interactionEPSS 4.9%CVE-2016-8618MEDIUMThe libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing a double-free due to an unsafe `size_t` muEPSS 4.8%CVE-2020-10899HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. User interactionEPSS 4.8%CVE-2023-49288HIGHDenial of Service in HTTP Collapsed Forwarding in SquidEPSS 4.8%CVE-2023-29358HIGHWindows GDI Elevation of Privilege VulnerabilityEPSS 4.7%CVE-2021-28631HIGHAdobe Acrobat Reader DC AcroForm Field Use-After-Free Remote Code Execution VulnerabilityEPSS 4.7%CVE-2021-28552HIGHAdobe Acrobat Reader DC XFA Template Use-After-Free Remote Code Execution VulnerabilityEPSS 4.7%