Fallos del tipo CWE-415

362 resultados

Uso após liberação de memória

Ocorre quando o código tenta acessar ou usar um bloco de memória que já foi liberado (free/delete). O programa continua referenciando um ponteiro inválido, levando a comportamento impreditível: corrupção de dados, execução arbitrária ou travamento. É uma das falhas mais críticas em linguagens de baixo nível como C e C++.

Ejemplo

Um serviço web aloca memória para armazenar dados de sessão de um cliente, libera quando a sessão encerra, mas uma thread em segundo plano tenta ler essa sessão novamente sem verificar se ainda é válida. Um atacante pode explorar a corrupção resultante para escrever código malicioso naquele espaço de memória.

Cómo mitigar

Use linguagens com gerenciamento automático de memória (Java, Python, Go) ou, em C/C++, adote práticas rigorosas: evite apontadores brutos, use smart pointers (unique_ptr, shared_ptr), implemente validação antes de acessar memória, e realize testes extensivos com ferramentas como AddressSanitizer e Valgrind.

CVE-2024-43514HIGHWindows Resilient File System (ReFS) Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2023-23402HIGHWindows Media Remote Code Execution VulnerabilityEPSS 0.6%CVE-2022-47975HIGHThe DUBAI module has a double free vulnerability. Successful exploitation of this vulnerability may affect system availability.EPSS 0.6%CVE-2026-69876HIGHWindows DHCP Server Remote Code Execution VulnerabilityEPSS 0.6%CVE-2026-55132HIGHMicrosoft Word Remote Code Execution VulnerabilityEPSS 0.6%CVE-2024-43640HIGHWindows Kernel-Mode Driver Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2023-45584MEDIUMA double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FoEPSS 0.6%CVE-2026-62889HIGHWindows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityEPSS 0.6%CVE-2026-66373HIGHRedis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE paylEPSS 0.6%CVE-2025-23322HIGHNVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where multiple requests could cause a double free when a streaEPSS 0.6%CVE-2024-21606HIGHJunos OS: SRX Series: When "tcp-encap" is configured and specific packets are received flowd will crashEPSS 0.6%CVE-2024-21445HIGHWindows USB Print Driver Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2025-4574MEDIUMCrossbeam-channel: crossbeam-channel vulnerable to double free on dropEPSS 0.5%CVE-2025-21183HIGHWindows Resilient File System (ReFS) Deduplication Service Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2025-21182HIGHWindows Resilient File System (ReFS) Deduplication Service Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2025-5351MEDIUMLibssh: double free vulnerability in libssh key export functionsEPSS 0.5%CVE-2020-25637—A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting information about netEPSS 0.5%CVE-2024-12107HIGHDouble Free in µD3TNEPSS 0.5%CVE-2023-45679HIGHAttempt to free an uninitialized memory pointer in vorbis_deinit in stb_vorbisEPSS 0.5%CVE-2024-20498HIGHMultiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could alEPSS 0.5%