Weaknesses of type CWE-416

5,043 results

Uso após liberação de memória

Ocorre quando o código tenta acessar um bloco de memória que já foi desalocado (free/delete). O ponteiro continua apontando para aquele endereço, mas o dado ali pode ter sido sobrescrito por outra operação, causando comportamento impredizível, corrupção de dados ou execução de código arbitrário.

Example

Um buffer é alocado, depois liberado com free(). Mais adiante, o código ainda tenta ler ou escrever naquele mesmo ponteiro sem verificar. Se um atacante controlar a alocação subsequente daquele endereço, consegue manipular o conteúdo que será lido.

How to mitigate

Anule o ponteiro imediatamente após liberar (ptr = NULL), implemente análise estática para detectar acessos pós-liberação, use ferramentas como valgrind ou AddressSanitizer nos testes, e considere linguagens com gerenciamento automático de memória para código sensível.

CVE-2023-32616HIGHA use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles 3D annotations. A specially crafted Javascript code insidEPSS 1.8%CVE-2018-20623MEDIUMIn GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the process_archive function in readelEPSS 1.8%CVE-2009-2416MEDIUMMultiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allow context-dependent atEPSS 1.8%CVE-2020-4031LOWUse-After-Free in gdi_SelectObject in FreeRDPEPSS 1.8%CVE-2021-24037—A use after free in hermes, while emitting certain error messages, prior to commit d86e185e485b6330216dee8e854455c694e3a36e allows attackersEPSS 1.8%CVE-2022-1212CRITICALUse-After-Free in str_escape in mruby/mruby in mruby/mrubyEPSS 1.8%CVE-2024-21332HIGHSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS 1.8%CVE-2024-30101HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 1.8%CVE-2021-21822HIGHA use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.3.37598. A specially crafted PDFEPSS 1.8%CVE-2024-2886HIGHUse after free in WebCodecs in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to perform arbitrary read/write via a crafted EPSS 1.8%CVE-2022-22533—Due to improper error handling in SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7EPSS 1.8%CVE-2021-34324—A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Jt981.dll library EPSS 1.8%CVE-2024-26222HIGHWindows DNS Server Remote Code Execution VulnerabilityEPSS 1.8%CVE-2021-3403—In ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code exEPSS 1.8%CVE-2023-44446HIGHGStreamer MXF File Parsing Use-After-Free Remote Code Execution VulnerabilityEPSS 1.7%CVE-2021-3796HIGHUse After Free in vim/vimEPSS 1.7%CVE-2021-3752—A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls connect to the socket and disconnect simultaEPSS 1.7%CVE-2019-3817HIGHA use-after-free flaw has been discovered in libcomps before version 0.1.10 in the way ObjMRTrees are merged. An attacker, who is able to maEPSS 1.7%CVE-2021-4192MEDIUMUse After Free in vim/vimEPSS 1.7%CVE-2023-40088HIGHIn callback_thread_event of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible memory corruption due to a use after freEPSS 1.7%