Fallos del tipo CWE-590

20 resultados

Liberação de memória não alocada no heap

Ocorre quando o código tenta liberar (com free(), delete ou equivalente) uma região de memória que não foi alocada dinamicamente no heap. Isso pode corromper o gerenciador de memória, causar crashes ou comportamento imprevisível, pois o allocator tentará manipular estruturas de controle que não lhe pertencem.

Ejemplo

Um programa aloca um array local na stack (char buf[100]) e depois tenta liberar com free(buf), ou libera um ponteiro que aponta para dados globais. O allocator não reconhece o endereço como válido e a operação causa undefined behavior.

Cómo mitigar

Rastreie claramente qual memória foi alocada dinamicamente (malloc, new, calloc) versus stack ou globais. Use ferramentas como Valgrind, AddressSanitizer ou análise estática para detectar mismatches entre alocação e liberação. Implemente code review rigoroso em C/C++, especialmente em gerenciamento manual de memória.

CVE-2020-6016—Valve's Game Networking Sockets prior to version v1.2.0 improperly handles unreliable segments with negative offsets in function SNP_ReceiveEPSS 5.8%CVE-2022-31625HIGHFreeing unallocated memory in php_pgsql_free_params()EPSS 3.4%CVE-2021-42377—An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafteEPSS 3.4%CVE-2022-31627HIGHHeap buffer overflow in finfo_bufferEPSS 2.0%CVE-2023-25565HIGHGSS-NTLMSSP vulnerable to incorrect free when decoding target informationEPSS 1.1%CVE-2025-32911CRITICALLibsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable valueEPSS 0.9%CVE-2023-42459HIGHMalformed DATA submessage leads to bad-free error in Fast-DDSEPSS 0.8%CVE-2025-54899HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-18582MEDIUMmz-automation libiec61850 Report Sending Path reporting.c Reporting_RCBWriteAccessHandler free of memory not on the heapEPSS 0.5%CVE-2026-20810HIGHWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2023-22291HIGHAn invalid free vulnerability exists in the Frame stream parser functionality of Ichitaro 2022 1.0.1.57600. A specially crafted document canEPSS 0.5%CVE-2025-42994HIGHMultiple vulnerabilities in SAP MDM ServerEPSS 0.4%CVE-2025-42995HIGHMultiple vulnerabilities in SAP MDM ServerEPSS 0.4%CVE-2021-3939HIGHFree of static data in accountsserviceEPSS 0.3%CVE-2023-31973HIGHyasm v1.3.0 was discovered to contain a use after free via the function expand_mmac_params at /nasm/nasm-pp.c. Note: Multiple third parties EPSS 0.3%CVE-2021-39218MEDIUMOut-of-bounds read/write and invalid free with `externref`s and GC safepoints in WasmtimeEPSS 0.3%CVE-2025-42996MEDIUMMultiple vulnerabilities in SAP MDM ServerEPSS 0.2%CVE-2025-5899MEDIUMGNU PSPP pspp-convert.c parse_variables_option free of memory not on the heapEPSS 0.1%CVE-2025-7006MEDIUMAvast antivirus use of stack memory after free when scanning a malformed PE fileEPSS 0.1%CVE-2026-47328MEDIUMInvalid pointer deallocation in Ubuntu Linux AppArmor notification handlingEPSS 0.1%