Falhas do tipo CWE-415

453 resultados

Uso após liberação de memória

Ocorre quando o código tenta acessar um bloco de memória que já foi desalocado (free, delete). Após a liberação, aquele endereço pode ser reutilizado pelo sistema ou conter lixo, causando comportamento imprevisível, corrupção de dados ou execução de código arbitrário.

Exemplo

Um ponteiro é liberado com free() e depois o código tenta ler ou escrever nele novamente — por exemplo, chamar um método em um objeto deletado em C++, ou acessar um array após liberar sua memória. Um atacante pode explorar isso alocando novamente aquele espaço com dados maliciosos.

Como mitigar

Use linguagens com garbage collection ou gerenciamento automático de memória (Python, Java, Go). Em C/C++, implemente validação rigorosa de ponteiros, use smart pointers (unique_ptr, shared_ptr), defina ponteiros como nullptr após liberar, e revise fluxos de desalocação em código crítico com ferramentas como AddressSanitizer e Valgrind.

CVE-2024-26932HIGHusb: typec: tcpm: fix double-free issue in tcpm_port_unregister_pd()EPSS 0.2%CVE-2026-108104MEDIUMXerial snappy-java 1.1.7.4 before 1.1.10.10 Double Release of Pooled Buffers in SnappyFramedInputStreamEPSS 0.2%CVE-2026-86962MEDIUMA double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, maEPSS 0.2%CVE-2022-43454HIGHA double free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadEPSS 0.2%CVE-2026-95635HIGHPhotoshop Desktop | Double Free (CWE-415)EPSS 0.2%CVE-2024-56775HIGHdrm/amd/display: Fix handling of plane refcountEPSS 0.2%CVE-2026-5657MEDIUMDouble Free in WiresharkEPSS 0.2%CVE-2026-78116MEDIUMDouble free of an RTIO submission in the Broadcom AFBR-S50 sensor driver data-evaluation error pathEPSS 0.2%CVE-2026-69398HIGHWindows Bluetooth Service Elevation of Privilege VulnerabilityEPSS 0.2%CVE-2025-31235MEDIUMA double free issue was addressed with improved memory management. This issue is fixed in iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14EPSS 0.2%CVE-2022-40683HIGHA double free in Fortinet FortiWeb version 7.0.0 through 7.0.3 may allows attacker to execute unauthorized code or commands via specially crEPSS 0.2%CVE-2024-53133HIGHdrm/amd/display: Handle dml allocation failure to avoid crashEPSS 0.2%CVE-2021-34981HIGHLinux Kernel Bluetooth CMTP Module Double Free Privilege Escalation VulnerabilityEPSS 0.2%CVE-2026-34341HIGHWindows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege VulnerabilityEPSS 0.2%CVE-2026-88149HIGHWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityEPSS 0.2%CVE-2026-45852HIGHRDMA/rxe: Fix double free in rxe_srq_from_initEPSS 0.2%CVE-2024-50071HIGHpinctrl: nuvoton: fix a double free in ma35_pinctrl_dt_node_to_map_func()EPSS 0.2%CVE-2026-92211HIGHPixar Animation Studio OpenUSD Crate File Parsing Double Free Remote Code Execution VulnerabilityEPSS 0.2%CVE-2023-28411MEDIUMDouble free in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via EPSS 0.2%CVE-2026-88812HIGHX.Org Server XKB SetGeometry TextDoodad Double FreeEPSS 0.2%