Weaknesses of type CWE-416

5,143 results

Uso após liberação de memória

Ocorre quando o código tenta acessar um bloco de memória que já foi desalocado (free/delete). O ponteiro continua apontando para aquele endereço, mas o dado ali pode ter sido sobrescrito por outra operação, causando comportamento impredizível, corrupção de dados ou execução de código arbitrário.

Example

Um buffer é alocado, depois liberado com free(). Mais adiante, o código ainda tenta ler ou escrever naquele mesmo ponteiro sem verificar. Se um atacante controlar a alocação subsequente daquele endereço, consegue manipular o conteúdo que será lido.

How to mitigate

Anule o ponteiro imediatamente após liberar (ptr = NULL), implemente análise estática para detectar acessos pós-liberação, use ferramentas como valgrind ou AddressSanitizer nos testes, e considere linguagens com gerenciamento automático de memória para código sensível.

CVE-2022-49761HIGHbtrfs: always report error in run_one_delayed_ref()EPSS 0.2%CVE-2025-21968HIGHdrm/amd/display: Fix slab-use-after-free on hdcp_workEPSS 0.2%CVE-2023-53253HIGHHID: nvidia-shield: Reference hid_device devm allocation of input_dev nameEPSS 0.2%CVE-2023-52935HIGHmm/khugepaged: fix ->anon_vma raceEPSS 0.2%CVE-2024-56635HIGHnet: avoid potential UAF in default_operstate()EPSS 0.2%CVE-2025-15538MEDIUMOpen Asset Import Library Assimp LWOMaterial.cpp FindUVChannels use after freeEPSS 0.2%CVE-2026-1289HIGHPDF File Parsing Vulnerabilities in Certain Autodesk Desktop ProductsEPSS 0.2%CVE-2026-33018HIGHlibsixel: Use-After-Free in load_gif()EPSS 0.2%CVE-2023-41093LOWLoss of confidentiality due to potential race condition in Bluetooth controller Connection_Handle reuseEPSS 0.2%CVE-2022-49921HIGHnet: sched: Fix use after free in red_enqueue()EPSS 0.2%CVE-2026-55406MEDIUMBuffa: Use-After-Free in OwnedView via Unsound 'static Lifetime Promotion in DerefEPSS 0.2%CVE-2024-27217MEDIUMMSDP has a use after free vulnerabilityEPSS 0.2%CVE-2023-53023HIGHnet: nfc: Fix use-after-free in local_cleanup()EPSS 0.2%CVE-2023-42892HIGHA use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.6.3, macOS Sonoma 14.2, macOS EPSS 0.2%CVE-2025-4878LOWLibssh: use of uninitialized variable in privatekey_from_file()EPSS 0.2%CVE-2023-53021HIGHnet/sched: sch_taprio: fix possible use-after-freeEPSS 0.2%CVE-2026-34734HIGHHDF5: H5T__conv_struct Use After FreeEPSS 0.2%CVE-2026-87628HIGHUse after free in Cast in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to potentially execute arbitrary code outside thEPSS 0.2%CVE-2026-17746MEDIUMUse after free in GPU in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to pEPSS 0.2%CVE-2026-12029HIGHUse after free in Video in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer proceEPSS 0.2%