Fallos del tipo CWE-416

6177 resultados

Uso após liberação de memória

Ocorre quando o código tenta acessar uma área de memória que já foi liberada (deallocated). O programa continua usando um ponteiro que aponta para um endereço inválido, causando leitura/escrita em memória não controlada. Isso pode levar a crash, corrupção de dados ou execução arbitrária de código.

Ejemplo

Um navegador aloca memória para um objeto DOM, depois o remove da página e libera a memória. Se um script JavaScript ainda tentar acessar esse objeto deletado, o navegador tenta ler/escrever em um endereço que agora contém outro dado, causando comportamento impredizível ou exploração por atacante.

Cómo mitigar

Use linguagens com garbage collection (Java, Python, C#) ou práticas rigorosas: null os ponteiros após free(), use smart pointers (C++), evite compartilhamento de referências sem sincronização, faça testes de memória com ferramentas como Valgrind ou AddressSanitizer.

CVE-2021-3962—A flaw was found in ImageMagick where it did not properly sanitize certain input before using it to invoke convert processes. This flaw alloEPSS 6.0%CVE-2020-27267—KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial Connectivity (all versions), OPC-Aggregator (all versEPSS 6.0%CVE-2022-2588MEDIUMIt was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeEPSS 5.9%CVE-2026-10886CRITICALUse after free in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via aEPSS 5.9%CVE-2023-35382HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 5.6%CVE-2024-26182HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 5.6%CVE-2026-43499HIGHrtmutex: Use waiter::task instead of current in remove_waiter()EPSS 5.4%CVE-2020-8231—Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data.EPSS 5.3%CVE-2024-9954HIGHUse after free in AI in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted EPSS 5.3%CVE-2021-40725HIGHAdobe Acrobat Reader DC AcroForm listbox Use-After-Free Remote Code Execution VulnerabilityEPSS 5.3%CVE-2021-40726HIGHAdobe Acrobat Reader DC AcroForm Field Use-After-Free Remote Code Execution VulnerabilityEPSS 5.3%CVE-2024-38085HIGHWindows Graphics Component Elevation of Privilege VulnerabilityEPSS 5.3%CVE-2019-17141HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interacEPSS 5.2%CVE-2019-17140HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interacEPSS 5.2%CVE-2021-28632HIGHZDI-CAN-13471: Adobe Acrobat Reader DC AcroForm Field Use-After-Free Remote Code Execution VulnerabilityEPSS 5.2%CVE-2022-23308HIGHvalid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.EPSS 5.1%CVE-2021-28562HIGHAdobe Acrobat Reader use-after-free could lead to arbitrary code executionEPSS 5.1%CVE-2023-0215HIGHUse-after-free following BIO_new_NDEFEPSS 5.0%CVE-2016-8619MEDIUMThe function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory double free.EPSS 5.0%CVE-2024-5841HIGHUse after free in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted EPSS 5.0%