Weaknesses of type CWE-416

5,138 results

Uso após liberação de memória

Ocorre quando o código tenta acessar um bloco de memória que já foi desalocado (free/delete). O ponteiro continua apontando para aquele endereço, mas o dado ali pode ter sido sobrescrito por outra operação, causando comportamento impredizível, corrupção de dados ou execução de código arbitrário.

Example

Um buffer é alocado, depois liberado com free(). Mais adiante, o código ainda tenta ler ou escrever naquele mesmo ponteiro sem verificar. Se um atacante controlar a alocação subsequente daquele endereço, consegue manipular o conteúdo que será lido.

How to mitigate

Anule o ponteiro imediatamente após liberar (ptr = NULL), implemente análise estática para detectar acessos pós-liberação, use ferramentas como valgrind ou AddressSanitizer nos testes, e considere linguagens com gerenciamento automático de memória para código sensível.

CVE-2022-49182HIGHnet: hns3: add vlan list lock to protect vlan listEPSS 0.3%CVE-2024-26333MEDIUMswftools v0.9.2 was discovered to contain a segmentation violation via the function free_lines at swftools/lib/modules/swfshape.c.EPSS 0.3%CVE-2022-49196HIGHpowerpc/pseries: Fix use after free in remove_phb_dynamic()EPSS 0.3%CVE-2022-41858HIGHA flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is in progress to detach in sl_tx_timeout in EPSS 0.3%CVE-2026-10915HIGHUse after free in Core in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to EPSS 0.3%CVE-2026-11639HIGHUse after free in Compositing in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via a crafEPSS 0.3%CVE-2023-45898HIGHThe Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extents_status.c, related to ext4_es_insert_extent.EPSS 0.3%CVE-2026-10634MEDIUMUse-after-free in Zephyr native TCP `net_tcp_foreach()` due to dropping `tcp_lock` during the callbackEPSS 0.3%CVE-2026-25171HIGHWindows Authentication Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-25170HIGHWindows Hyper-V Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-25178HIGHWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-24869HIGHUse-after-free in the Layout: Scrolling and Overflow componentEPSS 0.3%CVE-2022-32914HIGHA use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, wEPSS 0.3%CVE-2024-56672HIGHblk-cgroup: Fix UAF in blkcg_unpin_online()EPSS 0.3%CVE-2025-61815HIGHInDesign Desktop | Use After Free (CWE-416)EPSS 0.3%CVE-2026-11643HIGHUse after free in Proxy in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via malicious network tEPSS 0.3%CVE-2025-61814HIGHInDesign Desktop | Use After Free (CWE-416)EPSS 0.3%CVE-2025-1290HIGHA race condition Use-After-Free vulnerability exists in the virtio_transport_space_update function within the Kernel 5.4 on ChromeOS. ConcurEPSS 0.3%CVE-2026-12462HIGHUse after free in Media in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to execuEPSS 0.3%CVE-2023-0240HIGHUse after free in io_uring in the Linux KernelEPSS 0.3%