Fallos del tipo CWE-244

20 resultados

Liberação de memória heap sem limpeza prévia

Quando um programa libera memória heap (malloc, new) sem antes sobrescrever seus dados sensíveis, informações confidenciais — como senhas, chaves criptográficas ou tokens — permanecem acessíveis na memória. Um atacante com acesso à máquina pode inspecionar a heap e recuperar esses dados mesmo após o programa ter 'liberado' a alocação.

Ejemplo

Um aplicativo lê uma senha do usuário em um buffer alocado dinamicamente, verifica a autenticação e depois chama free() sem antes zerar o buffer. A memória volta ao pool livre do SO, mas o conteúdo da senha ainda está lá até ser reutilizado — e processos maliciosos ou ferramentas forenses podem lê-la.

Cómo mitigar

Antes de liberar memória que contém dados sensíveis, sobrescreva o conteúdo com zeros ou dados aleatórios (use memset_s, SecureZeroMemory no Windows, ou equivalentes em sua linguagem). Considere também usar estruturas de dados especializadas que fazem limpeza automática, como secure string libraries.

CVE-2022-20943MEDIUMMultiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products couEPSS 0.9%CVE-2022-20922MEDIUMMultiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products couEPSS 0.8%CVE-2023-20070MEDIUMA vulnerability in the TLS 1.3 implementation of the Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote atEPSS 0.5%CVE-2023-20177MEDIUMA vulnerability in the SSL file policy implementation of Cisco Firepower Threat Defense (FTD) Software that occurs when the SSL/TLS connectiEPSS 0.5%CVE-2025-5105MEDIUMTOZED ZLT W51 Service Port 7777 heap inspectionEPSS 0.4%CVE-2025-26304HIGHA memory leak has been identified in the parseSWF_EXPORTASSETS function in util/parser.c of libming v0.4.8.EPSS 0.4%CVE-2025-26305HIGHA memory leak has been identified in the parseSWF_SOUNDINFO function in util/parser.c of libming v0.4.8, which allows attackers to cause a dEPSS 0.4%CVE-2026-20039HIGHCisco Adaptive Security Appliance and Firepower Threat Defense Software SSL VPN Authentication Denial of Service VulnerabilityEPSS 0.4%CVE-2025-36118HIGHIBM Storage Virtualize Information DisclosureEPSS 0.4%CVE-2025-45663MEDIUMAn issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a dom_event structure.EPSS 0.3%CVE-2025-1719MEDIUMMultiple Vulnerabilities in IBM Concert SoftwareEPSS 0.3%CVE-2025-1722MEDIUMMultiple Vulnerabilities in IBM Concert SoftwareEPSS 0.3%CVE-2025-1759MEDIUMIBM Concert Software information disclosureEPSS 0.3%CVE-2025-70873HIGHAn information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obEPSS 0.3%CVE-2025-1721MEDIUMBM Concert Software Improper Clearing of Heap Memory Before Release.EPSS 0.3%CVE-2026-48025MEDIUMnebula-mesh: Decrypted CA private key persists in heap after signingEPSS 0.3%CVE-2023-20031MEDIUMA vulnerability in the SSL/TLS certificate handling of Snort 3 Detection Engine integration with Cisco Firepower Threat Defense (FTD) SoftwaEPSS 0.3%CVE-2025-33101MEDIUMMultiple Vulnerabilities in IBM Concert Software.EPSS 0.2%CVE-2025-33013MEDIUMIBM MQ Operator information disclosureEPSS 0.1%CVE-2025-36083MEDIUMMultiple Vulnerabilities in IBM Concert Software.EPSS 0.1%