Falhas do tipo CWE-415

362 resultados

Uso após liberação de memória

Ocorre quando o código tenta acessar um bloco de memória que já foi desalocado (free, delete). Após a liberação, aquele endereço pode ser reutilizado pelo sistema ou conter lixo, causando comportamento imprevisível, corrupção de dados ou execução de código arbitrário.

Exemplo

Um ponteiro é liberado com free() e depois o código tenta ler ou escrever nele novamente — por exemplo, chamar um método em um objeto deletado em C++, ou acessar um array após liberar sua memória. Um atacante pode explorar isso alocando novamente aquele espaço com dados maliciosos.

Como mitigar

Use linguagens com garbage collection ou gerenciamento automático de memória (Python, Java, Go). Em C/C++, implemente validação rigorosa de ponteiros, use smart pointers (unique_ptr, shared_ptr), defina ponteiros como nullptr após liberar, e revise fluxos de desalocação em código crítico com ferramentas como AddressSanitizer e Valgrind.

CVE-2023-27537—A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without EPSS 1.9%CVE-2022-44640CRITICALHeimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key DistribEPSS 1.8%CVE-2020-11017MEDIUMDouble free in cliprdr_server_receive_capabilities in FreeRDPEPSS 1.8%CVE-2010-3957HIGHDouble free vulnerability in the OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 EPSS 1.8%CVE-2025-21201HIGHWindows Telephony Server Remote Code Execution VulnerabilityEPSS 1.8%CVE-2024-30097HIGHMicrosoft Speech Application Programming Interface (SAPI) Remote Code Execution VulnerabilityEPSS 1.7%CVE-2024-23809CRITICALA double-free vulnerability exists in the BrainVision ASCII Header Parsing functionality of The Biosig Project libbiosig 2.5.0 and Master BrEPSS 1.7%CVE-2024-38087HIGHSQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityEPSS 1.7%CVE-2023-27320HIGHSudo before 1.9.13p2 has a double free in the per-command chroot feature.EPSS 1.7%CVE-2018-0160—A vulnerability in Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attackeEPSS 1.6%CVE-2024-22097CRITICALA double-free vulnerability exists in the BrainVision Header Parsing functionality of The Biosig Project libbiosig Master Branch (ab0ee111) EPSS 1.6%CVE-2024-30013HIGHWindows MultiPoint Services Remote Code Execution VulnerabilityEPSS 1.6%CVE-2022-32574HIGHA double-free vulnerability exists in the web interface /action/ipcamSetParamPost functionality of Abode Systems, Inc. iota All-In-One SecurEPSS 1.5%CVE-2021-3492HIGHUbuntu linux kernel shiftfs file system double free vulnerabilityEPSS 1.5%CVE-2026-62766HIGHWindows Kerberos Elevation of Privilege VulnerabilityEPSS 1.5%CVE-2026-18798HIGHQUIC Server May Trigger Double Free When Processing INITIAL PacketEPSS 1.5%CVE-2023-39975HIGHkdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger anEPSS 1.5%CVE-2024-43447HIGHWindows SMBv3 Server Remote Code Execution VulnerabilityEPSS 1.5%CVE-2024-27099CRITICALAzure IoT Platform Device SDK Double Free VulnerabilityEPSS 1.4%CVE-2020-1686HIGHJunos OS: Kernel crash (vmcore) upon receipt of a malformed IPv6 packet.EPSS 1.4%