Weaknesses of type CWE-763

59 results

Liberação de ponteiro ou referência inválida

Ocorre quando o código tenta liberar (desalocar) um ponteiro ou referência que não aponta para memória alocada dinamicamente, ou que já foi liberada anteriormente. Isso corrompe o heap, causando crashes, vazamento de memória ou execução arbitrária de código.

Example

Uma função recebe um ponteiro como parâmetro e o libera sem verificar se ele é válido ou se já foi desalocado antes. Um atacante passa um endereço inválido ou um ponteiro duplo (double-free) e o programa falha ou se torna explorável.

How to mitigate

Valide ponteiros antes de liberar (verifique se são NULL ou se vieram de alocação própria), use wrappers de alocação que rastreiam memória, adote linguagens com garbage collection, e aplique análise estática de código para detectar double-free e liberações inválidas.

CVE-2019-11930—An invalid free in mb_detect_order can cause the application to crash or potentially result in remote code execution. This issue affects HHVEPSS 3.2%CVE-2021-3682—A flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2. It occurs when dropping packets during a bulEPSS 2.9%CVE-2025-25215HIGHDell ControlVault3/ControlVault3 Plus cv_close arbitrary free vulnerabilityEPSS 2.7%CVE-2021-21401HIGHInvalid free() call in NanopbEPSS 1.8%CVE-2020-5139—A vulnerability in SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS) due to the release of InEPSS 1.8%CVE-2021-24028—An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other unEPSS 1.7%CVE-2022-2521—It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at tif_close.c:131 called by tiffcrop.c:2522EPSS 1.3%CVE-2021-22760—A CWE-763: Release of invalid pointer or reference vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could resulEPSS 1.2%CVE-2026-83889HIGHWindows DNS Server Remote Code Execution VulnerabilityEPSS 1.1%CVE-2025-48431HIGHApache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.EPSS 1.0%CVE-2026-97011HIGHMicrosoft Office Excel Remote Code Execution VulnerabilityEPSS 0.8%CVE-2025-14233CRITICALInvalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on thEPSS 0.8%CVE-2020-27545MEDIUMlibdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted EPSS 0.8%CVE-2025-48768MEDIUMApache NuttX RTOS: fs/inode: fs_inoderemove root inode removalEPSS 0.8%CVE-2022-41691HIGHBIG-IP Advanced WAF/ASM bd vulnerability CVE-2022-41691EPSS 0.7%CVE-2026-19315CRITICALFireware OS Pre-Authentication Type Confusion in iked Allows Remote Code ExecutionEPSS 0.7%CVE-2026-74860HIGHLibxml2: double-free/uaf in libxml2 python bindingsEPSS 0.7%CVE-2023-0459MEDIUMCopy_from_user Spectre-V1 Gadget in Linux KernelEPSS 0.6%CVE-2023-4883HIGHMultiple vulnerabilities in Open5GSEPSS 0.6%CVE-2024-44852HIGHOpen Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a segmentation violation via the component thetEPSS 0.6%