Fallos del tipo CWE-415

362 resultados

Uso após liberação de memória

Ocorre quando o código tenta acessar ou usar um bloco de memória que já foi liberado (free/delete). O programa continua referenciando um ponteiro inválido, levando a comportamento impreditível: corrupção de dados, execução arbitrária ou travamento. É uma das falhas mais críticas em linguagens de baixo nível como C e C++.

Ejemplo

Um serviço web aloca memória para armazenar dados de sessão de um cliente, libera quando a sessão encerra, mas uma thread em segundo plano tenta ler essa sessão novamente sem verificar se ainda é válida. Um atacante pode explorar a corrupção resultante para escrever código malicioso naquele espaço de memória.

Cómo mitigar

Use linguagens com gerenciamento automático de memória (Java, Python, Go) ou, em C/C++, adote práticas rigorosas: evite apontadores brutos, use smart pointers (unique_ptr, shared_ptr), implemente validação antes de acessar memória, e realize testes extensivos com ferramentas como AddressSanitizer e Valgrind.

CVE-2026-43706MEDIUMA double free issue was addressed with improved memory management. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8EPSS 0.4%CVE-2024-10934CRITICALOpenBSD NFS double-free vulnerabilityEPSS 0.4%CVE-2026-18663MEDIUM389-ds-base: 389-ds-base: pre-authentication double-free in get_ldapmessage_controls_ext() via critical session tracking controlEPSS 0.4%CVE-2026-44422HIGHFreeRDP RDPEAR NDR ref-id aliasing causes client-side UAF/double-free and type confusionEPSS 0.4%CVE-2026-12659HIGHRockwell Automation Flex 5000® Adapter - Denial of ServiceEPSS 0.4%CVE-2022-50401CRITICALnfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failureEPSS 0.4%CVE-2026-81950HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-39564HIGHJunos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to RPD crashEPSS 0.4%CVE-2026-10653MEDIUMNon-atomic `net_buf` reference counts cause double-free / free-list corruption under concurrent unrefEPSS 0.4%CVE-2024-23141HIGHMultiple Vulnerabilities in the Autodesk AutoCAD Desktop SoftwareEPSS 0.4%CVE-2026-21918HIGHJunos OS: SRX and MX Series: When TCP packets occur in a specific sequence flowd crashesEPSS 0.4%CVE-2025-21673CRITICALsmb: client: fix double free of TCP_Server_Info::hostnameEPSS 0.4%CVE-2025-23102HIGHAn issue was discovered in Samsung Mobile Processor Exynos 980, 990, 1080, 2100, 1280, 2200, 1380, 1480 and 2400. A Double Free in the mobilEPSS 0.4%CVE-2021-0271MEDIUMJunos OS: EX2200-C Series, EX3200 Series, EX3300 Series, EX4200 Series, EX4500 Series, EX4550 Series, EX6210 Series, EX8208 Series, EX8216 Series: Receipt of a crafted ARP packet by an adjacent attacker will cause the sfid process to core.EPSS 0.4%CVE-2023-53360CRITICALNFSv4.2: Rework scratch handling for READ_PLUS (again)EPSS 0.4%CVE-2025-59505HIGHWindows Smart Card Reader Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2026-14604MEDIUMOpen Asset Import Library Assimp PLY Model PlyLoader.cpp ExportToBlob double freeEPSS 0.4%CVE-2025-20134HIGHCisco Adaptive Security Appliance and Firepower Threat Defense Software SSL/TLS Certificate Denial of Service VulnerabilityEPSS 0.4%CVE-2026-33838HIGHWindows Message Queuing (MSMQ) Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2026-20863HIGHWin32k Elevation of Privilege VulnerabilityEPSS 0.4%