Fallos del tipo CWE-416

5043 resultados

Uso após liberação de memória

Ocorre quando o código tenta acessar uma área de memória que já foi liberada (deallocated). O programa continua usando um ponteiro que aponta para um endereço inválido, causando leitura/escrita em memória não controlada. Isso pode levar a crash, corrupção de dados ou execução arbitrária de código.

Ejemplo

Um navegador aloca memória para um objeto DOM, depois o remove da página e libera a memória. Se um script JavaScript ainda tentar acessar esse objeto deletado, o navegador tenta ler/escrever em um endereço que agora contém outro dado, causando comportamento impredizível ou exploração por atacante.

Cómo mitigar

Use linguagens com garbage collection (Java, Python, C#) ou práticas rigorosas: null os ponteiros após free(), use smart pointers (C++), evite compartilhamento de referências sem sincronização, faça testes de memória com ferramentas como Valgrind ou AddressSanitizer.

CVE-2023-41769HIGHLayer 2 Tunneling Protocol Remote Code Execution VulnerabilityEPSS 1.3%CVE-2023-41767HIGHLayer 2 Tunneling Protocol Remote Code Execution VulnerabilityEPSS 1.3%CVE-2023-41765HIGHLayer 2 Tunneling Protocol Remote Code Execution VulnerabilityEPSS 1.3%CVE-2023-41770HIGHLayer 2 Tunneling Protocol Remote Code Execution VulnerabilityEPSS 1.3%CVE-2023-41771HIGHLayer 2 Tunneling Protocol Remote Code Execution VulnerabilityEPSS 1.3%CVE-2023-38166HIGHLayer 2 Tunneling Protocol Remote Code Execution VulnerabilityEPSS 1.3%CVE-2023-41768HIGHLayer 2 Tunneling Protocol Remote Code Execution VulnerabilityEPSS 1.3%CVE-2022-30065HIGHA use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk patternEPSS 1.3%CVE-2020-27280—A use after free issue has been identified in the way ISPSoft(v3.12 and prior) processes project files, allowing an attacker to craft a specEPSS 1.3%CVE-2019-2393MEDIUMCrash while joining collections with $lookupEPSS 1.2%CVE-2023-30470CRITICALA use-after-free related to unsound inference in the bytecode generation when optimizations are enabled for Hermes prior to commit da8990f73EPSS 1.2%CVE-2023-5472HIGHUse after free in Profiles in Google Chrome prior to 118.0.5993.117 allowed a remote attacker to potentially exploit heap corruption via a cEPSS 1.2%CVE-2023-46156HIGHAffected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to create a denial of serviEPSS 1.2%CVE-2025-49708CRITICALMicrosoft Graphics Component Elevation of Privilege VulnerabilityEPSS 1.2%CVE-2024-4331HIGHUse after free in Picture In Picture in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to potentially exploit heap corruptiEPSS 1.2%CVE-2023-32038HIGHMicrosoft ODBC Driver Remote Code Execution VulnerabilityEPSS 1.2%CVE-2022-32746—A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding daEPSS 1.2%CVE-2024-21326CRITICALMicrosoft Edge (Chromium-based) Elevation of Privilege VulnerabilityEPSS 1.2%CVE-2021-22759—A CWE-416: Use after free vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remoEPSS 1.2%CVE-2024-21399HIGHMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityEPSS 1.2%