Falhas do tipo CWE-244

20 resultados

Limpeza inadequada de memória heap antes de liberação

Quando uma aplicação libera memória heap (com free(), delete, etc.) sem antes limpar seu conteúdo, dados sensíveis — como senhas, chaves criptográficas ou tokens — podem permanecer acessíveis na memória física. Um atacante com acesso ao heap (via core dump, scanner de memória ou outro processo) consegue recuperar esses dados mesmo depois que a variável foi 'liberada'.

Exemplo

Um servidor web autentica um usuário, armazena a senha em char* password, usa-a para validação e depois chama free(password). Mas os bytes da senha continuam lá na memória. Se o processo crashear e um dump for gerado, ou se outro código malicioso varrer o heap, a senha fica exposta.

Como mitigar

Sempre sobrescreva memória sensível com zeros (ou padrões aleatórios) antes de liberar: use memset(password, 0, length) antes de free(). Melhor ainda: use bibliotecas especializadas como libsodium (sodium_memzero) ou, em linguagens modernas, tipos que garantem zeragem automática ao sair de escopo.

CVE-2022-20943MEDIUMMultiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products couEPSS 0.9%CVE-2022-20922MEDIUMMultiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products couEPSS 0.8%CVE-2023-20070MEDIUMA vulnerability in the TLS 1.3 implementation of the Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote atEPSS 0.5%CVE-2023-20177MEDIUMA vulnerability in the SSL file policy implementation of Cisco Firepower Threat Defense (FTD) Software that occurs when the SSL/TLS connectiEPSS 0.5%CVE-2025-5105MEDIUMTOZED ZLT W51 Service Port 7777 heap inspectionEPSS 0.4%CVE-2025-26304HIGHA memory leak has been identified in the parseSWF_EXPORTASSETS function in util/parser.c of libming v0.4.8.EPSS 0.4%CVE-2025-26305HIGHA memory leak has been identified in the parseSWF_SOUNDINFO function in util/parser.c of libming v0.4.8, which allows attackers to cause a dEPSS 0.4%CVE-2026-20039HIGHCisco Adaptive Security Appliance and Firepower Threat Defense Software SSL VPN Authentication Denial of Service VulnerabilityEPSS 0.4%CVE-2025-36118HIGHIBM Storage Virtualize Information DisclosureEPSS 0.4%CVE-2025-45663MEDIUMAn issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a dom_event structure.EPSS 0.3%CVE-2025-1719MEDIUMMultiple Vulnerabilities in IBM Concert SoftwareEPSS 0.3%CVE-2025-1722MEDIUMMultiple Vulnerabilities in IBM Concert SoftwareEPSS 0.3%CVE-2025-1759MEDIUMIBM Concert Software information disclosureEPSS 0.3%CVE-2025-70873HIGHAn information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obEPSS 0.3%CVE-2025-1721MEDIUMBM Concert Software Improper Clearing of Heap Memory Before Release.EPSS 0.3%CVE-2026-48025MEDIUMnebula-mesh: Decrypted CA private key persists in heap after signingEPSS 0.3%CVE-2023-20031MEDIUMA vulnerability in the SSL/TLS certificate handling of Snort 3 Detection Engine integration with Cisco Firepower Threat Defense (FTD) SoftwaEPSS 0.3%CVE-2025-33101MEDIUMMultiple Vulnerabilities in IBM Concert Software.EPSS 0.2%CVE-2025-33013MEDIUMIBM MQ Operator information disclosureEPSS 0.1%CVE-2025-36083MEDIUMMultiple Vulnerabilities in IBM Concert Software.EPSS 0.1%