Weaknesses of type CWE-416

5,042 results

Uso após liberação de memória

Ocorre quando o código tenta acessar um bloco de memória que já foi desalocado (free/delete). O ponteiro continua apontando para aquele endereço, mas o dado ali pode ter sido sobrescrito por outra operação, causando comportamento impredizível, corrupção de dados ou execução de código arbitrário.

Example

Um buffer é alocado, depois liberado com free(). Mais adiante, o código ainda tenta ler ou escrever naquele mesmo ponteiro sem verificar. Se um atacante controlar a alocação subsequente daquele endereço, consegue manipular o conteúdo que será lido.

How to mitigate

Anule o ponteiro imediatamente após liberar (ptr = NULL), implemente análise estática para detectar acessos pós-liberação, use ferramentas como valgrind ou AddressSanitizer nos testes, e considere linguagens com gerenciamento automático de memória para código sensível.

CVE-2021-40420HIGHA use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543. A specially-crafted PDFEPSS 4.7%CVE-2018-9951—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interactiEPSS 4.6%CVE-2018-16841MEDIUMSamba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial of service. When configured to accept smart-EPSS 4.6%CVE-2018-17679—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interactioEPSS 4.6%CVE-2024-41830HIGHTalos Security Advisory for Adobe (TALOS-2024-2009)EPSS 4.5%CVE-2024-30032HIGHWindows DWM Core Library Elevation of Privilege VulnerabilityEPSS 4.5%CVE-2023-0215HIGHUse-after-free following BIO_new_NDEFEPSS 4.5%CVE-2026-24289HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 4.5%CVE-2021-30661HIGHA use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iOS 14.5 and iPadOS 14EPSS 4.5%KEVCVE-2022-34233MEDIUMAdobe Acrobat Reader DC Doc print Use-After-Free Information Disclosure VulnerabilityEPSS 4.5%CVE-2025-6424CRITICALUse-after-free in FontFaceSetEPSS 4.4%CVE-2025-50177HIGHMicrosoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityEPSS 4.4%CVE-2019-18197HIGHIn xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances. If the relevant memory area haEPSS 4.4%CVE-2021-28641HIGHAdobe Acrobat Reader Use-After-Free Arbitrary Code Execution VulnerabilityEPSS 4.3%CVE-2022-34220HIGHAcrobat Reader DC Font Parsing Use-After-Free Remote Code Execution VulnerabilityEPSS 4.3%CVE-2019-6769HIGHThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.1.16828. User interactiEPSS 4.3%CVE-2024-30284HIGHZDI-CAN-23466: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution VulnerabilityEPSS 4.3%CVE-2026-2313HIGHUse after free in CSS in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially exploit heap corruption via a craftedEPSS 4.3%CVE-2019-6774HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.4.1.16828. User interactionEPSS 4.2%CVE-2019-6775HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interactionEPSS 4.2%