Fallos del tipo CWE-590

26 resultados

Liberação de memória não alocada no heap

Ocorre quando o código tenta liberar (com free(), delete ou equivalente) uma região de memória que não foi alocada dinamicamente no heap. Isso pode corromper o gerenciador de memória, causar crashes ou comportamento imprevisível, pois o allocator tentará manipular estruturas de controle que não lhe pertencem.

Ejemplo

Um programa aloca um array local na stack (char buf[100]) e depois tenta liberar com free(buf), ou libera um ponteiro que aponta para dados globais. O allocator não reconhece o endereço como válido e a operação causa undefined behavior.

Cómo mitigar

Rastreie claramente qual memória foi alocada dinamicamente (malloc, new, calloc) versus stack ou globais. Use ferramentas como Valgrind, AddressSanitizer ou análise estática para detectar mismatches entre alocação e liberação. Implemente code review rigoroso em C/C++, especialmente em gerenciamento manual de memória.

CVE-2020-6016—Valve's Game Networking Sockets prior to version v1.2.0 improperly handles unreliable segments with negative offsets in function SNP_ReceiveEPSS 6.0%CVE-2022-31625HIGHFreeing unallocated memory in php_pgsql_free_params()EPSS 3.8%CVE-2021-42377—An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafteEPSS 3.6%CVE-2022-31627HIGHHeap buffer overflow in finfo_bufferEPSS 2.1%CVE-2023-25565HIGHGSS-NTLMSSP vulnerable to incorrect free when decoding target informationEPSS 1.1%CVE-2023-42459HIGHMalformed DATA submessage leads to bad-free error in Fast-DDSEPSS 1.0%CVE-2025-32911CRITICALLibsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable valueEPSS 1.0%CVE-2026-18582MEDIUMmz-automation libiec61850 Report Sending Path reporting.c Reporting_RCBWriteAccessHandler free of memory not on the heapEPSS 0.9%CVE-2025-54899HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.6%CVE-2026-20810HIGHWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2026-76465CRITICALCisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution VulnerabilityEPSS 0.5%CVE-2023-22291HIGHAn invalid free vulnerability exists in the Frame stream parser functionality of Ichitaro 2022 1.0.1.57600. A specially crafted document canEPSS 0.5%CVE-2025-42994HIGHMultiple vulnerabilities in SAP MDM ServerEPSS 0.5%CVE-2026-68908MEDIUMlibIEC61850: Oversized RptID can trigger invalid free of a stack-backed visible string in the report send pathEPSS 0.5%CVE-2025-42995HIGHMultiple vulnerabilities in SAP MDM ServerEPSS 0.4%CVE-2026-106578MEDIUMImageMagick: Invalid Memory Free in MVG decoderEPSS 0.4%CVE-2021-3939HIGHFree of static data in accountsserviceEPSS 0.4%CVE-2026-95311CRITICALFree of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentiaEPSS 0.3%CVE-2026-94370MEDIUMMemory corruption (double free / use-after-free) vulnerability in core string handling impacts Qt for MCUsEPSS 0.3%CVE-2023-31973HIGHyasm v1.3.0 was discovered to contain a use after free via the function expand_mmac_params at /nasm/nasm-pp.c. Note: Multiple third parties EPSS 0.3%