Falhas do tipo CWE-415

359 resultados

Uso após liberação de memória

Ocorre quando o código tenta acessar um bloco de memória que já foi desalocado (free, delete). Após a liberação, aquele endereço pode ser reutilizado pelo sistema ou conter lixo, causando comportamento imprevisível, corrupção de dados ou execução de código arbitrário.

Exemplo

Um ponteiro é liberado com free() e depois o código tenta ler ou escrever nele novamente — por exemplo, chamar um método em um objeto deletado em C++, ou acessar um array após liberar sua memória. Um atacante pode explorar isso alocando novamente aquele espaço com dados maliciosos.

Como mitigar

Use linguagens com garbage collection ou gerenciamento automático de memória (Python, Java, Go). Em C/C++, implemente validação rigorosa de ponteiros, use smart pointers (unique_ptr, shared_ptr), defina ponteiros como nullptr após liberar, e revise fluxos de desalocação em código crítico com ferramentas como AddressSanitizer e Valgrind.

CVE-2025-21291HIGHWindows Direct Show Remote Code Execution VulnerabilityEPSS 1.4%CVE-2021-34769HIGHCisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Denial of Service VulnerabilitiesEPSS 1.4%CVE-2021-34768HIGHCisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Denial of Service VulnerabilitiesEPSS 1.4%CVE-2024-49014HIGHSQL Server Native Client Remote Code Execution VulnerabilityEPSS 1.4%CVE-2022-40507HIGHDouble free in CoreEPSS 1.3%CVE-2025-32988MEDIUMGnutls: vulnerability in gnutls othername san exportEPSS 1.3%CVE-2021-1565HIGHCisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Denial of Service VulnerabilitiesEPSS 1.3%CVE-2023-44247MEDIUMA double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 6.4 all versions may allow a privileged attacker to execute code or EPSS 1.2%CVE-2022-2519—There is a double free or corruption in rotateImage() at tiffcrop.c:8839 found in libtiff 4.4.0rc1EPSS 1.2%CVE-2024-2002HIGHLibdwarf: crashes randomly on fuzzed objectEPSS 1.1%CVE-2020-27794—A double free issue was discovered in radare2 in cmd_info.c:cmd_info(). Successful exploitation could lead to modification of unexpected memEPSS 1.1%CVE-2023-38562HIGHA double-free vulnerability exists in the IP header loopback parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafteEPSS 1.1%CVE-2023-41678HIGHA double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1.0.3, 1.1.0 through 1.1.1 allows attacker toEPSS 1.1%CVE-2021-34333—A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll libEPSS 1.1%CVE-2022-20803HIGHClamAV Double-free Vulnerability in the OLE2 File ParserEPSS 1.1%CVE-2022-3806CRITICALBluetooth HCI Error Handling Double FreeEPSS 1.0%CVE-2023-29469MEDIUMAn issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.cEPSS 1.0%CVE-2024-26257HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-35371HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-36420HIGHMicrosoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityEPSS 1.0%