Weaknesses of type CWE-416

5,043 results

Uso após liberação de memória

Ocorre quando o código tenta acessar um bloco de memória que já foi desalocado (free/delete). O ponteiro continua apontando para aquele endereço, mas o dado ali pode ter sido sobrescrito por outra operação, causando comportamento impredizível, corrupção de dados ou execução de código arbitrário.

Example

Um buffer é alocado, depois liberado com free(). Mais adiante, o código ainda tenta ler ou escrever naquele mesmo ponteiro sem verificar. Se um atacante controlar a alocação subsequente daquele endereço, consegue manipular o conteúdo que será lido.

How to mitigate

Anule o ponteiro imediatamente após liberar (ptr = NULL), implemente análise estática para detectar acessos pós-liberação, use ferramentas como valgrind ou AddressSanitizer nos testes, e considere linguagens com gerenciamento automático de memória para código sensível.

CVE-2024-30006HIGHMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityEPSS 1.7%CVE-2022-0156MEDIUMUse After Free in vim/vimEPSS 1.7%CVE-2023-23392CRITICALHTTP Protocol Stack Remote Code Execution VulnerabilityEPSS 1.7%CVE-2020-27786—A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl comEPSS 1.7%CVE-2025-48769MEDIUMApache NuttX RTOS: fs/vfs/fs_rename: use after freeEPSS 1.7%CVE-2020-7068MEDIUMUse of freed hash key in the phar_parse_zipfile functionEPSS 1.7%CVE-2023-28297HIGHWindows Remote Procedure Call Service (RPCSS) Elevation of Privilege VulnerabilityEPSS 1.7%CVE-2021-34301—A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll libEPSS 1.7%CVE-2021-34298—A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll libEPSS 1.7%CVE-2024-38138HIGHWindows Deployment Services Remote Code Execution VulnerabilityEPSS 1.7%CVE-2024-21375HIGHMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityEPSS 1.7%CVE-2023-24925HIGHMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityEPSS 1.6%CVE-2024-38107HIGHWindows Power Dependency Coordinator Elevation of Privilege VulnerabilityEPSS 1.6%KEVCVE-2021-4187MEDIUMUse After Free in vim/vimEPSS 1.6%CVE-2018-17909—When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, the application fails to check if it is referencing freed mEPSS 1.6%CVE-2018-18989—In CX-One Versions 4.42 and prior (CX-Programmer Versions 9.66 and prior and CX-Server Versions 5.0.23 and prior), when processing project fEPSS 1.6%CVE-2024-26186HIGHMicrosoft SQL Server Native Scoring Remote Code Execution VulnerabilityEPSS 1.6%CVE-2021-4173MEDIUMUse After Free in vim/vimEPSS 1.6%CVE-2021-43790HIGHUse After Free in lucetEPSS 1.6%CVE-2022-26717HIGHA use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.EPSS 1.6%