Weaknesses of type CWE-763

59 results

Liberação de ponteiro ou referência inválida

Ocorre quando o código tenta liberar (desalocar) um ponteiro ou referência que não aponta para memória alocada dinamicamente, ou que já foi liberada anteriormente. Isso corrompe o heap, causando crashes, vazamento de memória ou execução arbitrária de código.

Example

Uma função recebe um ponteiro como parâmetro e o libera sem verificar se ele é válido ou se já foi desalocado antes. Um atacante passa um endereço inválido ou um ponteiro duplo (double-free) e o programa falha ou se torna explorável.

How to mitigate

Valide ponteiros antes de liberar (verifique se são NULL ou se vieram de alocação própria), use wrappers de alocação que rastreiam memória, adote linguagens com garbage collection, e aplique análise estática de código para detectar double-free e liberações inválidas.

CVE-2023-34312HIGHIn Tencent QQ through 9.7.8.29039 and TIM through 3.4.7.22084, QQProtect.exe and QQProtectEngine.dll do not validate pointers from inter-proEPSS 0.6%CVE-2025-30379HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.6%CVE-2024-6607HIGHLeaving pointerlock by pressing the escape key could be preventedEPSS 0.6%CVE-2026-112893HIGHPillow: Invalid free in FreeType glyph rendering when a stroker is activeEPSS 0.5%CVE-2025-11838HIGHWatchGuard Firebox iked Memory Corruption VulnerabilityEPSS 0.5%CVE-2026-15718MEDIUMInvalid pointer in the JavaScript: WebAssembly componentEPSS 0.5%CVE-2026-68908MEDIUMlibIEC61850: Oversized RptID can trigger invalid free of a stack-backed visible string in the report send pathEPSS 0.5%CVE-2026-74947HIGHPrivilege escalation due to invalid pointer in the Graphics componentEPSS 0.4%CVE-2022-4696HIGHThere exists a use-after-free vulnerability in the Linux kernel through io_uring and the IORING_OP_SPLICE operation. If IORING_OP_SPLICE is EPSS 0.4%CVE-2026-83735HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2026-52993CRITICALtipc: fix double-free in tipc_buf_append()EPSS 0.4%CVE-2023-20511MEDIUMRelease of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged attacker to create a double free condition potentEPSS 0.4%CVE-2026-22770MEDIUMImageMagick vulnerable to Release of Invalid Pointer in BilateralBlur when memory allocation failsEPSS 0.4%CVE-2024-25074MEDIUMAn issue was discovered in Samsung Semiconductor Mobile Processor and Modem Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, ExEPSS 0.4%CVE-2026-9516HIGHCpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throwsEPSS 0.4%CVE-2026-108133HIGHWindows Modern Device Management (MDM) Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2025-13824HIGHMicro820®, Micro850®, Micro870® – Specialized Fuzzing VulnerabilitiesEPSS 0.3%CVE-2026-85850HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-77500HIGHWindows Device Association Service Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2020-28941MEDIUMAn issue was discovered in drivers/accessibility/speakup/spk_ttyio.c in the Linux kernel through 5.9.9. Local attackers on systems with the EPSS 0.3%