Fallos del tipo CWE-416

5134 resultados

Uso após liberação de memória

Ocorre quando o código tenta acessar uma área de memória que já foi liberada (deallocated). O programa continua usando um ponteiro que aponta para um endereço inválido, causando leitura/escrita em memória não controlada. Isso pode levar a crash, corrupção de dados ou execução arbitrária de código.

Ejemplo

Um navegador aloca memória para um objeto DOM, depois o remove da página e libera a memória. Se um script JavaScript ainda tentar acessar esse objeto deletado, o navegador tenta ler/escrever em um endereço que agora contém outro dado, causando comportamento impredizível ou exploração por atacante.

Cómo mitigar

Use linguagens com garbage collection (Java, Python, C#) ou práticas rigorosas: null os ponteiros após free(), use smart pointers (C++), evite compartilhamento de referências sem sincronização, faça testes de memória com ferramentas como Valgrind ou AddressSanitizer.

CVE-2024-50269HIGHusb: musb: sunxi: Fix accessing an released usb phyEPSS 0.3%CVE-2025-11979MEDIUMUse-after-free in the MongoDB server query planner may lead to crash or undefined behaviorEPSS 0.3%CVE-2024-26852HIGHnet/ipv6: avoid possible UAF in ip6_route_mpath_notify()EPSS 0.3%CVE-2026-56113MEDIUMdhcpcd Heap Use-After-Free in dhcp6_deprecateaddrs via DHCPv6 RENEWEPSS 0.3%CVE-2022-49524HIGHmedia: pci: cx23885: Fix the error handling in cx23885_initdev()EPSS 0.3%CVE-2024-1848HIGHMultiple vulnerabilities exist in file reading procedure in SOLIDWORKS Desktop on Release SOLIDWORKS 2024EPSS 0.3%CVE-2026-85197HIGHLibsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body uploadEPSS 0.3%CVE-2026-102324HIGHUse after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer procesEPSS 0.3%CVE-2023-4611HIGHUse after free race between mbind() and vma-locked page faultEPSS 0.3%CVE-2026-33259MEDIUMConcurrent modification of RPZ data can lead to denial of servceEPSS 0.3%CVE-2026-13830HIGHUse after free in Chromoting in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via maliciEPSS 0.3%CVE-2024-31583HIGHPytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp.EPSS 0.3%CVE-2025-21791HIGHvrf: use RCU protection in l3mdev_l3_out()EPSS 0.3%CVE-2022-49223HIGHcxl/port: Hold port reference until decoder releaseEPSS 0.3%CVE-2026-100797HIGHPrivilege escalation due to use-after-free in the Graphics: WebRender componentEPSS 0.3%CVE-2022-49270HIGHdm: fix use-after-free in dm_cleanup_zoned_dev()EPSS 0.3%CVE-2022-49129HIGHmt76: mt7921: fix crash when startup fails.EPSS 0.3%CVE-2021-47653HIGHmedia: davinci: vpif: fix use-after-free on driver unbindEPSS 0.3%CVE-2022-49258HIGHcrypto: ccree - Fix use after free in cc_cipher_exit()EPSS 0.3%CVE-2026-7940HIGHUse after free in V8 in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious extension to exEPSS 0.3%