Falhas do tipo CWE-415

453 resultados

Uso após liberação de memória

Ocorre quando o código tenta acessar um bloco de memória que já foi desalocado (free, delete). Após a liberação, aquele endereço pode ser reutilizado pelo sistema ou conter lixo, causando comportamento imprevisível, corrupção de dados ou execução de código arbitrário.

Exemplo

Um ponteiro é liberado com free() e depois o código tenta ler ou escrever nele novamente — por exemplo, chamar um método em um objeto deletado em C++, ou acessar um array após liberar sua memória. Um atacante pode explorar isso alocando novamente aquele espaço com dados maliciosos.

Como mitigar

Use linguagens com garbage collection ou gerenciamento automático de memória (Python, Java, Go). Em C/C++, implemente validação rigorosa de ponteiros, use smart pointers (unique_ptr, shared_ptr), defina ponteiros como nullptr após liberar, e revise fluxos de desalocação em código crítico com ferramentas como AddressSanitizer e Valgrind.

CVE-2025-21673CRITICALsmb: client: fix double free of TCP_Server_Info::hostnameEPSS 0.4%CVE-2024-39564HIGHJunos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to RPD crashEPSS 0.4%CVE-2026-10653MEDIUMNon-atomic `net_buf` reference counts cause double-free / free-list corruption under concurrent unrefEPSS 0.4%CVE-2026-47895HIGHIn strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are EPSS 0.4%CVE-2024-23141HIGHMultiple Vulnerabilities in the Autodesk AutoCAD Desktop SoftwareEPSS 0.4%CVE-2026-43494HIGHnet/rds: reset op_nents when zerocopy page pin failsEPSS 0.4%CVE-2023-53360CRITICALNFSv4.2: Rework scratch handling for READ_PLUS (again)EPSS 0.4%CVE-2026-68192HIGHwifi: brcmfmac: make release_scratchbuffers idempotentEPSS 0.4%CVE-2026-21918HIGHJunos OS: SRX and MX Series: When TCP packets occur in a specific sequence flowd crashesEPSS 0.4%CVE-2025-55158MEDIUMVim double-free vulnerability during Vim9 script import operationsEPSS 0.4%CVE-2021-0271MEDIUMJunos OS: EX2200-C Series, EX3200 Series, EX3300 Series, EX4200 Series, EX4500 Series, EX4550 Series, EX6210 Series, EX8208 Series, EX8216 Series: Receipt of a crafted ARP packet by an adjacent attacker will cause the sfid process to core.EPSS 0.4%CVE-2026-57446MEDIUMlibIEC61850: Server-side double free in MMS ObtainFile task reuse due to stale FILE* handleEPSS 0.4%CVE-2026-33838HIGHWindows Message Queuing (MSMQ) Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2026-117943HIGHUse-after-free in the DOM: Core & HTML componentEPSS 0.4%CVE-2026-91018HIGHDouble Free in lwIP (lightweight IP)EPSS 0.4%CVE-2022-28388MEDIUMusb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1 has a double free.EPSS 0.4%CVE-2026-109257HIGHFreeRDP before 3.32.0 Double Free via NSCodec plane growth failureEPSS 0.4%CVE-2026-43706MEDIUMA double free issue was addressed with improved memory management. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8EPSS 0.4%CVE-2026-20863HIGHWin32k Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2024-53698LOWQTS, QuTS heroEPSS 0.4%