Falhas do tipo CWE-415

453 resultados

Uso após liberação de memória

Ocorre quando o código tenta acessar um bloco de memória que já foi desalocado (free, delete). Após a liberação, aquele endereço pode ser reutilizado pelo sistema ou conter lixo, causando comportamento imprevisível, corrupção de dados ou execução de código arbitrário.

Exemplo

Um ponteiro é liberado com free() e depois o código tenta ler ou escrever nele novamente — por exemplo, chamar um método em um objeto deletado em C++, ou acessar um array após liberar sua memória. Um atacante pode explorar isso alocando novamente aquele espaço com dados maliciosos.

Como mitigar

Use linguagens com garbage collection ou gerenciamento automático de memória (Python, Java, Go). Em C/C++, implemente validação rigorosa de ponteiros, use smart pointers (unique_ptr, shared_ptr), defina ponteiros como nullptr após liberar, e revise fluxos de desalocação em código crítico com ferramentas como AddressSanitizer e Valgrind.

CVE-2025-13844HIGHCWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user imports a malicious project file (SSD fiEPSS 0.2%CVE-2025-43282MEDIUMA double free issue was addressed with improved memory management. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS SeqEPSS 0.2%CVE-2025-61145MEDIUMlibtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.EPSS 0.2%CVE-2022-32614MEDIUMIn audio, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System executionEPSS 0.2%CVE-2026-31053MEDIUMA double free vulnerability exists in librz/bin/format/le/le.c in the function le_load_fixup_record(). When processing malformed or circularEPSS 0.2%CVE-2026-84558MEDIUMA double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27. An app may be able to cause EPSS 0.2%CVE-2026-85904HIGHWindows Device Association Service Elevation of Privilege VulnerabilityEPSS 0.2%CVE-2026-64118HIGHqed: fix double free in qed_cxt_tables_alloc()EPSS 0.2%CVE-2026-23789HIGHAn issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400EPSS 0.2%CVE-2026-17573MEDIUMDouble Free in H5D__chunk_copy() in HDF5 via a Crafted Chunk-Index Size FieldEPSS 0.2%CVE-2023-25801HIGHTensorFlow has double free in Fractional(Max/Avg)PoolEPSS 0.1%CVE-2026-11388MEDIUMDouble Free vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation.EPSS 0.1%CVE-2025-13566MEDIUMjarun nnn nnn.c run_cmd_as_plugin double freeEPSS 0.1%CVE-2023-52383MEDIUMDouble-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability.EPSS 0.1%CVE-2023-52384MEDIUMDouble-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability.EPSS 0.1%CVE-2026-82325MEDIUMA use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a syEPSS 0.1%CVE-2026-68994—A double free vulnerability in NPU driver due to improper pointer management (941)EPSS 0.1%CVE-2026-45202MEDIUMGPU DDK - Silent High-Order CMA Memory Leak & Double Free in `_FreeOSPages_Fast`EPSS 0.1%CVE-2026-68993—A double free vulnerability in NPU driver due to improper pointer management (940)EPSS 0.1%CVE-2026-43128HIGHRDMA/umem: Fix double dma_buf_unpin in failure pathEPSS 0.1%