Weaknesses of type CWE-416

5,043 results

Uso após liberação de memória

Ocorre quando o código tenta acessar um bloco de memória que já foi desalocado (free/delete). O ponteiro continua apontando para aquele endereço, mas o dado ali pode ter sido sobrescrito por outra operação, causando comportamento impredizível, corrupção de dados ou execução de código arbitrário.

Example

Um buffer é alocado, depois liberado com free(). Mais adiante, o código ainda tenta ler ou escrever naquele mesmo ponteiro sem verificar. Se um atacante controlar a alocação subsequente daquele endereço, consegue manipular o conteúdo que será lido.

How to mitigate

Anule o ponteiro imediatamente após liberar (ptr = NULL), implemente análise estática para detectar acessos pós-liberação, use ferramentas como valgrind ou AddressSanitizer nos testes, e considere linguagens com gerenciamento automático de memória para código sensível.

CVE-2023-41769HIGHLayer 2 Tunneling Protocol Remote Code Execution VulnerabilityEPSS 1.3%CVE-2023-41767HIGHLayer 2 Tunneling Protocol Remote Code Execution VulnerabilityEPSS 1.3%CVE-2023-41765HIGHLayer 2 Tunneling Protocol Remote Code Execution VulnerabilityEPSS 1.3%CVE-2023-41770HIGHLayer 2 Tunneling Protocol Remote Code Execution VulnerabilityEPSS 1.3%CVE-2023-41771HIGHLayer 2 Tunneling Protocol Remote Code Execution VulnerabilityEPSS 1.3%CVE-2023-38166HIGHLayer 2 Tunneling Protocol Remote Code Execution VulnerabilityEPSS 1.3%CVE-2023-41768HIGHLayer 2 Tunneling Protocol Remote Code Execution VulnerabilityEPSS 1.3%CVE-2022-30065HIGHA use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk patternEPSS 1.3%CVE-2020-27280—A use after free issue has been identified in the way ISPSoft(v3.12 and prior) processes project files, allowing an attacker to craft a specEPSS 1.3%CVE-2019-2393MEDIUMCrash while joining collections with $lookupEPSS 1.2%CVE-2023-30470CRITICALA use-after-free related to unsound inference in the bytecode generation when optimizations are enabled for Hermes prior to commit da8990f73EPSS 1.2%CVE-2023-5472HIGHUse after free in Profiles in Google Chrome prior to 118.0.5993.117 allowed a remote attacker to potentially exploit heap corruption via a cEPSS 1.2%CVE-2023-46156HIGHAffected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to create a denial of serviEPSS 1.2%CVE-2025-49708CRITICALMicrosoft Graphics Component Elevation of Privilege VulnerabilityEPSS 1.2%CVE-2024-4331HIGHUse after free in Picture In Picture in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to potentially exploit heap corruptiEPSS 1.2%CVE-2023-32038HIGHMicrosoft ODBC Driver Remote Code Execution VulnerabilityEPSS 1.2%CVE-2022-32746—A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding daEPSS 1.2%CVE-2024-21326CRITICALMicrosoft Edge (Chromium-based) Elevation of Privilege VulnerabilityEPSS 1.2%CVE-2021-22759—A CWE-416: Use after free vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remoEPSS 1.2%CVE-2024-21399HIGHMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityEPSS 1.2%