Weaknesses of type CWE-416

6,176 results

Uso após liberação de memória

Ocorre quando o código tenta acessar um bloco de memória que já foi desalocado (free/delete). O ponteiro continua apontando para aquele endereço, mas o dado ali pode ter sido sobrescrito por outra operação, causando comportamento impredizível, corrupção de dados ou execução de código arbitrário.

Example

Um buffer é alocado, depois liberado com free(). Mais adiante, o código ainda tenta ler ou escrever naquele mesmo ponteiro sem verificar. Se um atacante controlar a alocação subsequente daquele endereço, consegue manipular o conteúdo que será lido.

How to mitigate

Anule o ponteiro imediatamente após liberar (ptr = NULL), implemente análise estática para detectar acessos pós-liberação, use ferramentas como valgrind ou AddressSanitizer nos testes, e considere linguagens com gerenciamento automático de memória para código sensível.

CVE-2019-13720HIGHUse after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a craEPSS 49.4%KEVCVE-2022-47939CRITICALAn issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2pdu.c has a use-after-free and OOPS for SEPSS 49.3%CVE-2020-24437HIGHAcrobat Reader DC Use-After-Free Vulnerability Could Lead to Arbitrary Code ExecutionEPSS 46.5%CVE-2024-30080CRITICALMicrosoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityEPSS 42.9%CVE-2023-29336HIGHWin32k Elevation of Privilege VulnerabilityEPSS 41.2%KEVCVE-2014-0496HIGHUse-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allows attackersEPSS 40.0%KEVCVE-2021-34850HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaEPSS 38.3%CVE-2025-21760HIGHndisc: extend RCU protection in ndisc_send_skb()EPSS 38.0%CVE-2021-22930—Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory cEPSS 36.5%CVE-2021-37975HIGHUse after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HEPSS 34.9%KEVCVE-2022-42867HIGHA use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOSEPSS 34.8%CVE-2023-21674HIGHWindows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityEPSS 34.2%KEVCVE-2020-9715HIGHAdobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier havEPSS 33.3%KEVCVE-2021-30633CRITICALUse after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process tEPSS 33.2%KEVCVE-2011-0346HIGHUse-after-free vulnerability in the ReleaseInterface function in MSHTML.DLL in Microsoft Internet Explorer 6, 7, and 8 allows remote attackeEPSS 31.0%CVE-2022-2998HIGHUse after free in Browser Creation in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who had convinced a user to engage in EPSS 30.3%CVE-2024-38193HIGHWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityEPSS 28.5%KEVCVE-2024-1086HIGHUse-after-free in Linux kernel's netfilter: nf_tables componentEPSS 28.1%KEVCVE-2023-36802HIGHMicrosoft Streaming Service Proxy Elevation of Privilege VulnerabilityEPSS 27.9%KEVCVE-2023-28205HIGHA use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 and iPadOS 15.7.5, iOEPSS 27.1%KEV