Weaknesses of type CWE-763

39 results

Liberação de ponteiro ou referência inválida

Ocorre quando o código tenta liberar (desalocar) um ponteiro ou referência que não aponta para memória alocada dinamicamente, ou que já foi liberada anteriormente. Isso corrompe o heap, causando crashes, vazamento de memória ou execução arbitrária de código.

Example

Uma função recebe um ponteiro como parâmetro e o libera sem verificar se ele é válido ou se já foi desalocado antes. Um atacante passa um endereço inválido ou um ponteiro duplo (double-free) e o programa falha ou se torna explorável.

How to mitigate

Valide ponteiros antes de liberar (verifique se são NULL ou se vieram de alocação própria), use wrappers de alocação que rastreiam memória, adote linguagens com garbage collection, e aplique análise estática de código para detectar double-free e liberações inválidas.

CVE-2019-11930—An invalid free in mb_detect_order can cause the application to crash or potentially result in remote code execution. This issue affects HHVEPSS 3.2%CVE-2021-3682—A flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2. It occurs when dropping packets during a bulEPSS 2.9%CVE-2025-25215HIGHDell ControlVault3/ControlVault3 Plus cv_close arbitrary free vulnerabilityEPSS 1.9%CVE-2021-21401HIGHInvalid free() call in NanopbEPSS 1.8%CVE-2020-5139—A vulnerability in SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS) due to the release of InEPSS 1.8%CVE-2021-24028—An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other unEPSS 1.7%CVE-2021-22760—A CWE-763: Release of invalid pointer or reference vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could resulEPSS 1.2%CVE-2025-48431HIGHApache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.EPSS 1.1%CVE-2022-2521—It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at tif_close.c:131 called by tiffcrop.c:2522EPSS 1.0%CVE-2020-27545MEDIUMlibdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted EPSS 0.8%CVE-2025-48768MEDIUMApache NuttX RTOS: fs/inode: fs_inoderemove root inode removalEPSS 0.8%CVE-2025-14233CRITICALInvalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on thEPSS 0.8%CVE-2023-0459MEDIUMCopy_from_user Spectre-V1 Gadget in Linux KernelEPSS 0.6%CVE-2022-41691HIGHBIG-IP Advanced WAF/ASM bd vulnerability CVE-2022-41691EPSS 0.6%CVE-2023-34312HIGHIn Tencent QQ through 9.7.8.29039 and TIM through 3.4.7.22084, QQProtect.exe and QQProtectEngine.dll do not validate pointers from inter-proEPSS 0.6%CVE-2024-44852HIGHOpen Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a segmentation violation via the component thetEPSS 0.6%CVE-2024-6607HIGHLeaving pointerlock by pressing the escape key could be preventedEPSS 0.6%CVE-2023-4883HIGHMultiple vulnerabilities in Open5GSEPSS 0.5%CVE-2025-30379HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.5%CVE-2025-11838HIGHWatchGuard Firebox iked Memory Corruption VulnerabilityEPSS 0.5%