Falhas do tipo CWE-415

453 resultados

Uso após liberação de memória

Ocorre quando o código tenta acessar um bloco de memória que já foi desalocado (free, delete). Após a liberação, aquele endereço pode ser reutilizado pelo sistema ou conter lixo, causando comportamento imprevisível, corrupção de dados ou execução de código arbitrário.

Exemplo

Um ponteiro é liberado com free() e depois o código tenta ler ou escrever nele novamente — por exemplo, chamar um método em um objeto deletado em C++, ou acessar um array após liberar sua memória. Um atacante pode explorar isso alocando novamente aquele espaço com dados maliciosos.

Como mitigar

Use linguagens com garbage collection ou gerenciamento automático de memória (Python, Java, Go). Em C/C++, implemente validação rigorosa de ponteiros, use smart pointers (unique_ptr, shared_ptr), defina ponteiros como nullptr após liberar, e revise fluxos de desalocação em código crítico com ferramentas como AddressSanitizer e Valgrind.

CVE-2022-42915HIGHcurl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a non-HTTP(S) URL, it sets up the connection EPSS 3.7%CVE-2019-5797HIGHDouble free in DOMStorage in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafEPSS 3.4%CVE-2018-0469—Cisco IOS XE Software Web UI Denial of Service VulnerabilityEPSS 3.1%CVE-2021-27033HIGHDouble Free File Parsing Vulnerability in Autodesk Design ReviewEPSS 3.0%CVE-2020-16217—Advantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. A double free vulnerability caused by processing specially crafted project fiEPSS 2.9%CVE-2021-31449HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interactioEPSS 2.8%CVE-2023-33137HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 2.7%CVE-2020-1647CRITICALJunos OS: SRX Series: Double free vulnerability can lead to DoS or remote code execution due to the processing of a specific HTTP message when ICAP redirect service is enabledEPSS 2.6%CVE-2019-5460—Double Free in VLC versions <= 3.0.6 leads to a crash.EPSS 2.5%CVE-2021-23158—A flaw was found in htmldoc in v1.9.12. Double-free in function pspdf_export(),in ps-pdf.cxx may result in a write-what-where condition, allEPSS 2.4%CVE-2021-36088CRITICALFluent Bit (aka fluent-bit) 1.7.0 through 1.7.4 has a double free in flb_free (called from flb_parser_json_do and flb_parser_do).EPSS 2.4%CVE-2022-44640CRITICALHeimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key DistribEPSS 2.3%CVE-2022-2509HIGHA vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures inEPSS 2.3%CVE-2021-42533HIGHAdobe Bridge DCM File Parsing Double Free Remote Code Execution VulnerabilityEPSS 2.1%CVE-2018-8835—Double free vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allEPSS 2.0%CVE-2021-4091—A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series ofEPSS 2.0%CVE-2020-3179HIGHCisco Firepower Threat Defense Software Generic Routing Encapsulation Tunnel IPv6 Denial of Service VulnerabilityEPSS 2.0%CVE-2021-46621HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. UEPSS 1.9%CVE-2021-46625HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction EPSS 1.9%CVE-2023-27537—A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without EPSS 1.9%