Falhas do tipo CWE-415

362 resultados

Uso após liberação de memória

Ocorre quando o código tenta acessar um bloco de memória que já foi desalocado (free, delete). Após a liberação, aquele endereço pode ser reutilizado pelo sistema ou conter lixo, causando comportamento imprevisível, corrupção de dados ou execução de código arbitrário.

Exemplo

Um ponteiro é liberado com free() e depois o código tenta ler ou escrever nele novamente — por exemplo, chamar um método em um objeto deletado em C++, ou acessar um array após liberar sua memória. Um atacante pode explorar isso alocando novamente aquele espaço com dados maliciosos.

Como mitigar

Use linguagens com garbage collection ou gerenciamento automático de memória (Python, Java, Go). Em C/C++, implemente validação rigorosa de ponteiros, use smart pointers (unique_ptr, shared_ptr), defina ponteiros como nullptr após liberar, e revise fluxos de desalocação em código crítico com ferramentas como AddressSanitizer e Valgrind.

CVE-2026-57842HIGHNetBSD COMPAT_NETBSD32 Double Free / Use-After-Free via recvmsg() msg_iovlenEPSS 0.1%CVE-2023-21030HIGHIn Confirmation of keystore_cli_v2.cpp, there is a possible way to corrupt memory due to a double free. This could lead to local escalation EPSS 0.1%CVE-2026-23790MEDIUMAn issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A double-free vuEPSS 0.1%CVE-2025-27051HIGHDouble Free in Windows WLAN HostEPSS 0.1%CVE-2025-27046HIGHDouble Free in DisplayEPSS 0.1%CVE-2026-34867MEDIUMDouble free vulnerability in the multi-mode input system. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.1%CVE-2025-47316HIGHDouble Free in VideoEPSS 0.1%CVE-2023-32824MEDIUMIn rpmb , there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution prEPSS 0.1%CVE-2025-47396HIGHDouble Free in GraphicsEPSS 0.1%CVE-2024-44098HIGHIn lwis_device_event_states_clear_locked of lwis_event.c, there is a possible privilege escalation due to a double free. This could lead to EPSS 0.1%CVE-2025-21432HIGHDouble Free in SPS-HLOSEPSS 0.1%CVE-2026-32848MEDIUMNetBSD cryptodev Race Condition Double-Free via cryptodev_op()EPSS 0.1%CVE-2025-20786MEDIUMIn display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actEPSS 0.1%CVE-2022-33231CRITICALDouble free in CoreEPSS 0.1%CVE-2025-47356HIGHDouble Free in VideoEPSS 0.1%CVE-2025-36919HIGHIn aocc_read of aoc_channel_dev.c, there is a possible double free due to improper locking. This could lead to local escalation of privilegeEPSS 0.1%CVE-2025-20781HIGHIn display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actEPSS 0.1%CVE-2026-28537MEDIUMDouble free vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.1%CVE-2025-20801HIGHIn seninf, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege if a malicious acEPSS 0.1%CVE-2026-20415MEDIUMIn imgsys, there is a possible memory corruption due to improper locking. This could lead to local denial of service if a malicious actor haEPSS 0.1%